Description
The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation
operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the
targeted device
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IDEMIA | SIGMA Lite & Lite + | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Wide | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Extreme | < 4.15.5 | 4.15.5 |
| IDEMIA | MorphoWave Compact/XP | < 2.12.2 | 2.12.2 |
| IDEMIA | VisionPass | < 2.12.2 | 2.12.2 |
| IDEMIA | MorphoWave SP | < 1.2.7 | 1.2.7 |