CVE-2023-33221CWE-122

Heap Buffer Overflow when reading DESFire card

Medium · published December 15, 2023

CVSS v3.1
6.8
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying

internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code

Execution on the targeted device. This is especially problematic if you use Default DESFire key.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01032 · 63.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2023-12-15T11:32Z
EPSS history
Timeline
  • 15 DEC 11:32Z
    Heap Buffer Overflow when reading DESFire card
    cvelistv5