Stack buffer overflow when reading DESFire card
Priority MEDIUM 45CWE-121Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.
Summary
When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device
Why it matters now
EPSS 0.01288 70th percentileScored 2026-11-07
Fix Fixed SIGMA Lite & Lite + (IDEMIA): 4.15.5SIGMA Wide (IDEMIA): 4.15.5+4 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| IDEMIA | SIGMA Lite & Lite + | before 4.15.5 | 4.15.5 | Patch available | CNA |
| IDEMIA | SIGMA Wide | before 4.15.5 | 4.15.5 | Patch available | CNA |
| IDEMIA | SIGMA Extreme | before 4.15.5 | 4.15.5 | Patch available | CNA |
| IDEMIA | MorphoWave Compact/XP | before 2.12.2 | 2.12.2 | Patch available | CNA |
| IDEMIA | VisionPass | before 2.12.2 | 2.12.2 | Patch available | CNA |
| IDEMIA | MorphoWave SP | before 1.2.7 | 1.2.7 | Patch available | CNA |
- SIGMA Lite & Lite + VendorIDEMIA Affected before 4.15.5 Fixed in 4.15.5 Patch available CNA
- SIGMA Wide VendorIDEMIA Affected before 4.15.5 Fixed in 4.15.5 Patch available CNA
- SIGMA Extreme VendorIDEMIA Affected before 4.15.5 Fixed in 4.15.5 Patch available CNA
- MorphoWave Compact/XP VendorIDEMIA Affected before 2.12.2 Fixed in 2.12.2 Patch available CNA
- VisionPass VendorIDEMIA Affected before 2.12.2 Fixed in 2.12.2 Patch available CNA
- MorphoWave SP VendorIDEMIA Affected before 1.2.7 Fixed in 1.2.7 Patch available CNA
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:idemia:sigma_lite_firmware:*:*:*:*:*:*:*:* | before 4.15.5 | Vulnerable | IDEMIA |
| cpe:2.3:h:idemia:sigma_lite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | IDEMIA |
| cpe:2.3:o:idemia:sigma_lite\+_firmware:*:*:*:*:*:*:*:* | before 4.15.5 | Vulnerable | IDEMIA |
| cpe:2.3:h:idemia:sigma_lite\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | IDEMIA |
| cpe:2.3:o:idemia:sigma_extreme_firmware:*:*:*:*:*:*:*:* | before 4.15.5 | Vulnerable | IDEMIA |
| cpe:2.3:h:idemia:sigma_extreme:-:*:*:*:*:*:*:* | not specified by NVD | Running on | IDEMIA |
| cpe:2.3:o:idemia:sigma_wide_firmware:*:*:*:*:*:*:*:* | before 4.15.5 | Vulnerable | IDEMIA |
| cpe:2.3:h:idemia:sigma_wide:-:*:*:*:*:*:*:* | not specified by NVD | Running on | IDEMIA |
| cpe:2.3:o:idemia:morphowave_compact_firmware:*:*:*:*:*:*:*:* | before 2.12.2 | Vulnerable | IDEMIA |
| cpe:2.3:h:idemia:morphowave_compact:-:*:*:*:*:*:*:* | not specified by NVD | Running on | IDEMIA |
- cpe:2.3:o:idemia:sigma_lite_firmware:*:*:*:*:*:*:*:* Versions before 4.15.5 Vulnerable ·IDEMIA
- cpe:2.3:h:idemia:sigma_lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IDEMIA
- cpe:2.3:o:idemia:sigma_lite\+_firmware:*:*:*:*:*:*:*:* Versions before 4.15.5 Vulnerable ·IDEMIA
- cpe:2.3:h:idemia:sigma_lite\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IDEMIA
- cpe:2.3:o:idemia:sigma_extreme_firmware:*:*:*:*:*:*:*:* Versions before 4.15.5 Vulnerable ·IDEMIA
- cpe:2.3:h:idemia:sigma_extreme:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IDEMIA
- cpe:2.3:o:idemia:sigma_wide_firmware:*:*:*:*:*:*:*:* Versions before 4.15.5 Vulnerable ·IDEMIA
- cpe:2.3:h:idemia:sigma_wide:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IDEMIA
- cpe:2.3:o:idemia:morphowave_compact_firmware:*:*:*:*:*:*:*:* Versions before 2.12.2 Vulnerable ·IDEMIA
- cpe:2.3:h:idemia:morphowave_compact:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IDEMIA
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:idemia:morphowave_xp_firmware:*:*:*:*:*:*:*:* | before 2.12.2 | Vulnerable | IDEMIA |
| cpe:2.3:h:idemia:morphowave_xp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | IDEMIA |
| cpe:2.3:o:idemia:visionpass_firmware:*:*:*:*:*:*:*:* | before 2.12.2 | Vulnerable | IDEMIA |
| cpe:2.3:h:idemia:visionpass:-:*:*:*:*:*:*:* | not specified by NVD | Running on | IDEMIA |
| cpe:2.3:o:idemia:morphowave_sp_firmware:*:*:*:*:*:*:*:* | before 1.2.7 | Vulnerable | IDEMIA |
| cpe:2.3:h:idemia:morphowave_sp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | IDEMIA |
- cpe:2.3:o:idemia:morphowave_xp_firmware:*:*:*:*:*:*:*:* Versions before 2.12.2 Vulnerable ·IDEMIA
- cpe:2.3:h:idemia:morphowave_xp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IDEMIA
- cpe:2.3:o:idemia:visionpass_firmware:*:*:*:*:*:*:*:* Versions before 2.12.2 Vulnerable ·IDEMIA
- cpe:2.3:h:idemia:visionpass:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IDEMIA
- cpe:2.3:o:idemia:morphowave_sp_firmware:*:*:*:*:*:*:*:* Versions before 1.2.7 Vulnerable ·IDEMIA
- cpe:2.3:h:idemia:morphowave_sp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IDEMIA
Remediation
- Fix · CNA SIGMA Lite & Lite + (IDEMIA) Fixed in 4.15.5
- Fix · CNA SIGMA Wide (IDEMIA) Fixed in 4.15.5
- Fix · CNA SIGMA Extreme (IDEMIA) Fixed in 4.15.5
- Fix · CNA MorphoWave Compact/XP (IDEMIA) Fixed in 2.12.2
- Fix · CNA VisionPass (IDEMIA) Fixed in 2.12.2
- Fix · CNA MorphoWave SP (IDEMIA) Fixed in 1.2.7
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
IDEMIA MorphoWave Compact/XP, MorphoWave SP and 4 more products 1.2.7, 2.12.2, 4.15.5
6 records Highest priority Priority MEDIUM 5 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2023-16397 Heap Buffer Overflow when reading DESFire cardPriority MEDIUM 44
- TI-2023-16396 Stack Buffer Overflow when checking some attributes during retrofitPriority MEDIUM 44
- TI-2023-16395 Stack Buffer Overflow when checking retrofit packagePriority MEDIUM 44
Timeline
- 2026-10-02 Threatist record created from CVE-2023-33222
- 2026-10-03 Alias added: GHSA-j8qw-gjhc-h8ff
References
More IDEMIA Morphowave Compact Firmware vulnerabilities
- TI-2023-16397 Heap Buffer Overflow when reading DESFire card CVSS 3.1CRITICAL 9.8
- TI-2023-16396 Stack Buffer Overflow when checking some attributes during retrofit CVSS 3.1CRITICAL 9.8
- TI-2023-16395 Stack Buffer Overflow when checking retrofit package CVSS 3.1CRITICAL 9.8
- TI-2023-16394 Stack Buffer Overflow in a binary run at upgrade startup CVSS 3.1CRITICAL 9.8
- TI-2023-04300 Stored Cross Site Scripting in webserver administration CVSS 3.1HIGH 8.1
- TI-2023-16393 Missing integrity check on upgrade package CVSS 3.1HIGH 7.5
Sources
- CVE-2023-33222 · CVE Program
- CVE-2023-33222 · NVD
- FIRST EPSS
- GHSA-j8qw-gjhc-h8ff · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences