catalinv-ncc opened a new pull request, #19261: URL: https://github.com/apache/nuttx/pull/19261
drivers/contactless/mfrc522: Contactless Driver Is Not Robust In depth description in Issue https://github.com/apache/nuttx/issues/19260. ## Summary The mfrc522_mifare_read() command is also not robust and does not check that the page address is valid. From section 7.6.5 of the *MIFARE Ultralight contactless single-ticket IC (https://www.nxp.com/docs/en/data-sheet/MF0ICU1.pdf) document: >> The READ command needs the page address as a parameter. Only addresses 00h to 0Fh are decoded. ## Impact An attacker can specify an arbitrary page address when reading MIFARE tags. Without validation, this could read beyond intended memory regions on the tag, potentially causing a crash. ## Testing Builds fine. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
