SD cards have a microcontroller on them, and I believe some card readers use USB bus, so they probably are also vulnerable.