CVE-2022-40363

A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service (DoS) via a crafted NFC file.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cve@mitre.org

Published

2022-09-29

Last modified

2025-05-21

Weaknesses

CWE-787

Affected products

• Flipper Zero Firmware (Flipperzero)

References

• https://github.com/flipperdevices/flipperzero-firmware/pull/1697
• https://vvx7.io/posts/2022/09/your-amiibos-haunted/