Catalin Visinescu ae07c68d9e drivers/contactless/mfrc522: Contactless Driver Is Not Robust ... An attacker can specify an arbitrary page address when reading MIFARE tags. Without validation, this could read beyond intended memory regions on the tag, potentially causing a crash. The mfrc522_mifare_read() command is also not robust and does not check that the page address is valid. From section 7.6.5 of the *MIFARE Ultralight contactless single-ticket IC (https://www.nxp.com/docs/en/data-sheet/MF0ICU1.pdf) document: >> The READ command needs the page address as a parameter. Only addresses 00h to 0Fh are decoded. Testing: Builds fine. Signed-off-by: Catalin Visinescu <catalin_visinescu@yahoo.com>		2026-07-03 10:33:41 +08:00
..
CMakeLists.txt
Kconfig
Make.defs
mfrc522.c	drivers/contactless/mfrc522: Contactless Driver Is Not Robust	2026-07-03 10:33:41 +08:00
mfrc522.h
pn532.c	drivers/contactless/mfrc522: Contactless Driver Is Not Robust	2026-07-03 10:33:41 +08:00
pn532.h