CVE-2022-40363

Опубликовано: 29 сент. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service (DoS) via a crafted NFC file.

Ссылки

https://github.com/flipperdevices/flipperzero-firmware/pull/1697
Exploit
Issue Tracking
Patch
Third Party Advisory
https://vvx7.io/posts/2022/09/your-amiibos-haunted/
Exploit
Third Party Advisory
https://github.com/flipperdevices/flipperzero-firmware/pull/1697
Exploit
Issue Tracking
Patch
Third Party Advisory
https://vvx7.io/posts/2022/09/your-amiibos-haunted/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:flipperzero:flipper_zero_firmware:*:*:*:*:*:*:*:*

Версия до 0.65.2 (исключая)

cpe:2.3:h:flipperzero:flipper_zero:-:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00182

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-33v4-4p2r-hcrr