CVE-2023-21648 Integer Overflow to Buffer Overflow in RIL

Memory corruption in RIL while trying to send apdu packet...

CVE-2023-21648

CVE-2023-21648 is a memory corruption issue in the RIL when attempting to send APDU packets, observed across Qualcomm chipsets. The CVE description references memory corruption, with the CVE record also noting an Integer Overflow to Buffer Overflow in RIL. Public sources (NVD/Red Hat/CVE list) co...

PT-2023-18311 · Ril · Ril

Name of the Vulnerable Software and Affected Versions: RIL affected versions not specified Description: The issue is related to memory corruption in RIL when attempting to send an apdu packet. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

CVE-2022-33289

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...

Memory corruption

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...

CVE-2022-33289

Technical details about CVE-2022-33289 (affected products/versions/fix) are not provided in the supplied connected documents. Monitor for updates and additional authoritative disclosures.

CVE-2022-33289 Improper validation of array index in Modem

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card...

Hitachi Energy RTU500 series BCI Improper Input Validation (CVE-2021-35533)

"Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface BCI IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted...

CVE-2022-25705

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response...

Integer overflow

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response...

CVE-2022-25705 Integer Overflow to Buffer Overflow in Modem

Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response...

CVE-2022-25705

CVE-2022-25705 causes memory corruption in a Qualcomm modem due to an integer overflow that can overflow a buffer when handling APDU responses. The entry is listed under Qualcomm closed-source components; the exact affected product/version is not detailed in the provided documents. The CVSSv3.1 b...

SUSE CVE-2017-6414

Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host memory consumption via vectors related to allocating a new APDU object...

SUSE CVE-2018-14780

An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function ykpivfetchobject: % highlight c % ifsw == SWSUCCESS sizet outlen; int offs = ykpivgetlengthdata + 1, &outlen; ifoffs == 0 return YKPIVSIZEERROR;...

Input validation

Improper Input Validation vulnerability in the APDU parser in the Bidirectional Communication Interface BCI IEC 60870-5-104 function of Hitachi Energy RTU500 series allows an attacker to cause the receiving RTU500 CMU of which the BCI is enabled to reboot when receiving a specially crafted messag...

CVE-2017-6414

Memory leak in the vcardapdunew function in card7816.c in libcacard before 2.5.3 allows local guest OS users to cause a denial of service host memory consumption via vectors related to allocating a new APDU object...

CVE-2009-0368

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a 1 low level APDU command or 2 debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program...

Denial Of Service (DoS)

libcacard is vulnerable to denial of service. Attackers with local access could cause a system hang using excessive consumption of memory. The vulnerability exists in the function vcardapdunew of the file card7816.c and exploitable via vectors related to allocating a new APDU object...

Yubico PIV Tool 1.5.0 Buffer Overflow Vulnerability

A buffer overflow and an out of bounds memory read were identified in the yubico-piv-tool-1.5.0, these can be triggered by a malicious token. Multiple Vulnerabilities in Yubico Piv ====================================== Overview - -------- Confirmed Affected Versions: 1.5.0 Confirmed Patched...

OpenSC 0.18.0 Buffer Overflow / Out Of Bounds Read Vulnerability

Multiple issues have been identified in OpenSC, ranging from stack based buffer overflows to out of bounds reads and writes on the heap. They can be triggered by malicious smartcards sending malformed responses to APDU commands. Additionally to those fixes reported here, a lot of minor issues eg...