CVE-2023-52369

Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity

Critical · published February 18, 2024

CVSS v3.1
9.1
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

🚨 A stack overflow vulnerability in the NFC module could put your entire service on shaky ground! 🔥 Think of it like a restaurant where the kitchen is overwhelmed by a single order that’s too large to handle — suddenly, it can't serve any customers! If exploited, this vulnerability could lead to service disruptions, putting both availability and integrity at risk. Imagine your services going down unexpectedly, leaving users frustrated and on the edge of their seats!

Put simply

Think of it like a restaurant where the kitchen is overwhelmed by a single order that’s too large to handle — suddenly, it can't serve any customers! This vulnerability arises from improper handling of memory in the NFC module, allowing attackers to send crafted inputs that could overflow the stack and crash the service.

What to do

If exploited, this vulnerability could lead to service disruptions, putting both availability and integrity at risk. Imagine your services going down unexpectedly, leaving users frustrated and on the edge of their seats! To mitigate this risk, apply the latest patches as soon as possible and review your NFC module configurations. It's essential to monitor service logs for any unusual behavior to catch issues before they escalate. You've got this! Follow these steps and keep your services safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.0th percentile
Published
2024-02-18T03:39Z
EPSS history
Timeline
  • 18 FEB 03:39Z
    Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity
    cvelistv5