Idemia vulnerabilities
We track 6 vulnerabilities in Idemia products across 13 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2023.
Latest Idemia vulnerabilities
- 9.8 Critical severity
SIGMA Lite & Lite +: Out-of-bounds Write
When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code
- 9.8 Critical severity
SIGMA Lite & Lite +: Out-of-bounds Write
When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device.
- 9.8 Critical severity
SIGMA Lite & Lite +: Out-of-bounds Write
During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device
- 9.8 Critical severity
SIGMA Lite & Lite +: Out-of-bounds Write
The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device
- 9.8 Critical severity
SIGMA Lite & Lite +: Out-of-bounds Write
The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device.
- 7.5 High severity
By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's…
By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent denial of service for the terminal. the only way to recover the terminal is by sending back the terminal to the manufacturer