When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying
internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code
Execution on the targeted device. This is especially problematic if you use Default DESFire key.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIGMA Lite & Lite +
Vendor
IDEMIA
Product
SIGMA Lite & Lite +
Platforms
Unknown
Default status
unaffected
SIGMA Lite & Lite + · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.15.5
Unavailable
None listed
SIGMA Wide
Vendor
IDEMIA
Product
SIGMA Wide
Platforms
Unknown
Default status
unaffected
SIGMA Wide · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.15.5
Unavailable
None listed
SIGMA Extreme
Vendor
IDEMIA
Product
SIGMA Extreme
Platforms
Unknown
Default status
unaffected
SIGMA Extreme · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.15.5
Unavailable
None listed
MorphoWave Compact/XP
Vendor
IDEMIA
Product
MorphoWave Compact/XP
Platforms
Unknown
Default status
unaffected
MorphoWave Compact/XP · Scoped product and version facts