Vulnerability in certain IC chips of contactless IC card "FeliCa"

Overview For certain FeliCa IC chips shipped by Sony Corporation in or before 2017, a certain operation during cryptographic processing may compromise the intended security strength. Missing cryptographic step CWE-325 - CVE-2026-59776 KIRISHIKI Yudai of Unknown Technologies Inc. reported this...

CVE-2026-59776

The CVE describes a Missing Cryptographic Step (CWE-325) vulnerability in certain FeliCa IC chips shipped in or before 2017. If exploited, information stored in the IC chip may be read or tampered with. The issue concerns the cryptographic workflow of affected FeliCa chips and is supported by CVS...

EUVD-2026-46148

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

CVE-2026-59776

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

CVE-2026-59776

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...

PT-2026-61822

Missing Cryptographic Step CWE-325 vulnerability exists in certain FeliCa IC chips shipped in or before 2017. If the vulnerability is exploited, information stored in the IC chip may be read or tampered with...