Double free

2022-07-2002:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

JSON

HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.

CPENameOperatorVersion
hicos_natural_person_credential_component_clienteq3.1.0.00002
hicos_natural_person_credential_component_clienteq3.0.3.30306
hicos_natural_person_credential_component_clienteq3.0.3.30404

Name	Operator	Version
hicos_natural_person_credential_component_client	eq	3.1.0.00002
hicos_natural_person_credential_component_client	eq	3.0.3.30306
hicos_natural_person_credential_component_client	eq	3.0.3.30404

References

www.twcert.org.tw/tw/cp-132-6293-86576-1.html