PT-2022-21609 · Hicos · Hicos

Name of the Vulnerable Software and Affected Versions: HICOS affected versions not specified Description: The client-side citizen digital certificate component of HICOS has a stack-based buffer overflow issue when reading an IC card, due to insufficient validation of token information parameter...

PT-2022-21610 · Hicos · Hicos

Name of the Vulnerable Software and Affected Versions: HiCOS affected versions not specified Description: The issue is related to a double free vulnerability in the client-side citizen certificate component. This can be exploited by an unauthenticated physical attacker to corrupt memory, execute...