CVE-2018-4301

CVE-2018-4301 is a stack-based buffer overflow vulnerability (CWE-120) in the GemaltoKeyHandle.cpp component. It affects Smart Card Services software, with the issue addressed in the SCSSU-201801 update. The vulnerability carries a CVSS v3.1 base score of 9.8, reflecting its critical severity due to network accessibility, low attack complexity, and no requirements for privileges or user interaction.

An unauthenticated remote attacker could exploit this vulnerability over the network with low complexity and no user interaction. Successful exploitation would allow the attacker to achieve high impacts on confidentiality, integrity, and availability, potentially leading to arbitrary code execution and full system compromise.

The advisory at https://smartcardservices.github.io/security/ documents the fix in SCSSU-201801, recommending affected users apply this update to mitigate the buffer overflow risk.