CVE-2023-33222CWE-121

Stack buffer overflow when reading DESFire card

Medium · published December 15, 2023

CVSS v3.1
6.8
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

When handling contactless cards, usage of a specific function to get additional information from the card which doesn't

check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a

potential Remote Code Execution on the targeted device

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01288 · 70.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2023-12-15T11:33Z
EPSS history
Timeline
  • 15 DEC 11:33Z
    Stack buffer overflow when reading DESFire card
    cvelistv5