CVE-2023-33221 — Heap Buffer Overflow when reading DESFire card
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based …
Published: 2023-12-15 · CVSS: 6.8 · CVSS 3.1
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you use Default DESFire key.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7