Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Secure Elements Class 5 AVR client 多个缓冲区溢出漏洞
Vulnerability Description
Secure Elements Class 5 AVR client (又称C5 EVM) 2.8.1之前版本可以使远程攻击者借助经过修改的(1) EM_GET_CE_PARAMETER和(2) EM_SET_CE_PARAMETER 消息的大小，造成缓冲区溢出(可能是通读)，从而读取部分处理内存。
CVSS Information
N/A
Vulnerability Type
N/A