CVE-2022-40363: Flipperzero Flipper Zero Firmware

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service (DoS) via a crafted NFC file.

Affected products

• Flipperzero Flipper Zero Firmware: before 0.65.2 (fixed in 0.65.2)

Published 2022-09-29. Last modified 2026-06-17.