Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not present in the FreeStyle Libre 14-day in the U.S (announced in August 2018) and FreeStyle Libre 2 outside the U.S (announced in October 2018).
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://fortiguard.com/zeroday/FG-VD-19-112 | third party advisory |