SRAM dump via glitching the firmware update

Gemeldet auf December 27, 2018

Using a special glitching hardware an attacker could trick the device processor into Read Protection level 1 which allows readout of RAM. The issue was fixed by not storing sensitive data in RAM during the firmware update.

Fixed in firmware 1.8.0.

Gemeldet durch wallet.fail

Unsere Blog-Beiträge

Trezor Model One, Trezor Model T

Behobene Sicherheitslücken

Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.

Authenticity proofs not bounded to their secure element on TS7
16. August 2026
THP pairing could be completed without the pairing code
22. Juni 2026
Desktop update could install before signature verification completed
16. Juni 2026
Solana account-creation confirmation completeness
14. Juni 2026
Solana signing display improvement
12. Juni 2026
Coordination fee cap shown on CoinJoin authorization
3. Juni 2026