Description
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying
internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code
Execution on the targeted device. This is especially problematic if you use Default DESFire key.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IDEMIA | SIGMA Lite & Lite + | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Wide | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Extreme | < 4.15.5 | 4.15.5 |
| IDEMIA | MorphoWave Compact/XP | < 2.12.2 | 2.12.2 |
| IDEMIA | VisionPass | < 2.12.2 | 2.12.2 |
| IDEMIA | MorphoWave SP | < 1.2.7 | 1.2.7 |