Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8qw-gjhc-h8ff

Опубликовано: 15 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device

When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device

EPSS

Процентиль: 87%
0.03534
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 6.8
nvd
около 2 лет назад

When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device

EPSS

Процентиль: 87%
0.03534
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-121
CWE-787