Description
When handling contactless cards, usage of a specific function to get additional information from the card which doesn't
check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a
potential Remote Code Execution on the targeted device
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IDEMIA | SIGMA Lite & Lite + | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Wide | < 4.15.5 | 4.15.5 |
| IDEMIA | SIGMA Extreme | < 4.15.5 | 4.15.5 |
| IDEMIA | MorphoWave Compact/XP | < 2.12.2 | 2.12.2 |
| IDEMIA | VisionPass | < 2.12.2 | 2.12.2 |
| IDEMIA | MorphoWave SP | < 1.2.7 | 1.2.7 |