Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2022-35222

HiCOS Citizen verification component - Stack Buffer Overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HINET HiCOS Citizen verification component - Stack Buffer Overflow

  • libHicos_p11v1.so CHT PKCS#11 3.0.3.30306affected

HINET HiCOS Citizen verification component - Stack Buffer Overflow

  • HiCOSPKCS11.dll CHT PKCS#11 3.1.0.00002affected

HINET HiCOS Citizen verification component - Stack Buffer Overflow

  • libHicos_p11v1.dylib CHT PKCS#11 3.0.3.30404affected

References