Information leak via U2F

Gemeldet auf November 26, 2018

The C/C++ reference implementation for U2F by Yubico contains broken definition of a struct which can leak bytes from RAM via USB. The bug was fixed by updating the structure definition to a new correct one.

Fixed in 1.7.2. Read more at Christian's blog.

Gemeldet durch Christian Reitter

Unsere Blog-Beiträge

Trezor Model One

Behobene Sicherheitslücken

Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.

Authenticity proofs not bounded to their secure element on TS7
16. August 2026
THP pairing could be completed without the pairing code
22. Juni 2026
Desktop update could install before signature verification completed
16. Juni 2026
Solana account-creation confirmation completeness
14. Juni 2026
Solana signing display improvement
12. Juni 2026
Coordination fee cap shown on CoinJoin authorization
3. Juni 2026