Stefan Tatschner

A use-after-free issue occurs during the decryption of an S/MIME message when the application prompts for a security device password, such as a smartcard PIN or the Primary Password. If the message load process finishes or is cancelled while the prompt remains open, the message decoder is freed while still in use, which can lead to a crash.

Name of the Vulnerable Software and Affected Versions: STMicroelectronics STM32F0 series devices (affected versions not specified) Description: The issue is related to incorrect access control in RDP Level 1, which allows physically present attackers to extract the device's protected firmware via a special sequence of Serial Wire Debug (SWD) commands. This is due to a race condition between the full initialization of the SWD interface and the setup of flash protection. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.