Description
During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes
to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted
device
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IDEMIA | SIGMA Lite & Lite + | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Wide | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Extreme | < 4.15.5 | 4.15.5 |
| IDEMIA | MorphoWave Compact/XP | < 2.12.2 | 2.12.2 |
| IDEMIA | VisionPass | < 2.12.2 | 2.12.2 |
| IDEMIA | MorphoWave SP | < 1.2.7 | 1.2.7 |