Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-33218

Stack Buffer Overflow in a binary run at upgrade startup

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
IDEMIA

Description

The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IDEMIA SIGMA Lite & Lite +

Default version status: unaffected

  • 0 to < 4.15.5affected

IDEMIA SIGMA Wide

Default version status: unaffected

  • 0 to < 4.15.5affected

IDEMIA SIGMA Extreme

Default version status: unaffected

  • 0 to < 4.15.5affected

IDEMIA MorphoWave Compact/XP

Default version status: unaffected

  • 0 to < 2.12.2affected

IDEMIA VisionPass

Default version status: unaffected

  • 0 to < 2.12.2affected

IDEMIA MorphoWave SP

Default version status: unaffected

  • 0 to < 1.2.7affected

References