CVE-2023-33221 (published 2023-12-15T11:32:48.427Z)









When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying 
internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code 
Execution on the targeted device. This is especially problematic if you use Default DESFire key.








Affected products: Vendor: IDEMIA
Product: SIGMA Lite & Lite +
Versions: 0