CVE-2026-84854

7.0 Élevée

Publiée le 06/10/2026 à 12:16 · Modifiée le 15/10/2026 à 04:20 · Analyse NVD reportée · Source : 2fc02b1f-71e7-4514-a878-169626f68903

Description

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.

Traduire en français

Produits concernés

wibu-systems-ag wibukey
Siemens PSS(R)SINCAL V21.5
Siemens PSS(R)SINCAL V22.0
Siemens PSS(R)SINCAL V22.5

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.0 Élevée	2fc02b1f-71e7-4514-a878-169626f68903	`CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-787

Références

https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-100065.pdf
https://cert-portal.siemens.com/productcert/html/ssa-148322.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories