CVE-2023-33221

The CVE-2023-33221 issue is a boundary-check flaw in the DesFire card reading function that copies internal data, causing a heap-based buffer overflow and potential remote code execution. Reported across multiple sources (e.g., PT-Security; Red Hat; NVD), it specifically notes risk when the Defau...

CVE-2023-33222

CVE-2023-33222 describes a stack-based buffer overflow when reading DESFire contactless cards due to a function that does not check data boundaries. Affected context is described as a card-reader/readerStack overflow leading to potential Remote Code Execution on the targeted device. Exploitation ...

CVE-2023-33220

CVE-2023-33220 concerns a vulnerability in firmware during the retrofit validation process where boundaries are not properly checked when copying attributes. This results in a stack-based buffer overflow, potentially enabling Remote Code Execution on the targeted device. The vulnerability is desc...

CVE-2023-33217

The CVE-2023-33217 entry describes a design flaw in the firmware upgrade mechanism of the affected terminal, enabling a permanent denial of service or degraded operation. Affected: the terminal’s firmware upgrade process (no vendor/product/version details provided). Root cause: a flaw in the upgr...

CVE-2023-33218

CVE-2023-33218 involves a stack buffer overflow in the Parameter Zone Read/Write command handlers, potentially enabling Remote Code Execution on affected devices. The primary sources (NVD, Red Hat, CVE lists) describe a network-accessible vulnerability with high/severe impact (Confidentiality/Int...

CVE-2023-33219

Summary: CVE-2023-33219 corresponds to a vulnerability where the handler of the retrofit validation command fails to properly check boundaries during certain validation operations, enabling a stack-based buffer overflow and potentially Remote Code Execution on the targeted device. The connected d...