Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read).
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Class_5_enterprise_vulnerability_management | Secure_elements | 2.8.0 (including) | 2.8.0 (including) |