Information leak via U2F

Reportada en November 26, 2018

The C/C++ reference implementation for U2F by Yubico contains broken definition of a struct which can leak bytes from RAM via USB. The bug was fixed by updating the structure definition to a new correct one.

Fixed in 1.7.2. Read more at Christian's blog.

Reportada por Christian Reitter

Post en nuestro blog

Trezor Model One

Vulnerabilidades solucionadas

Reportada por la comunidad. Investigada. Solucionada. Porque tu seguridad no es una opción.

Authenticity proofs not bounded to their secure element on TS7
16 de agosto de 2026
THP pairing could be completed without the pairing code
22 de junio de 2026
Desktop update could install before signature verification completed
16 de junio de 2026
Solana account-creation confirmation completeness
14 de junio de 2026
Solana signing display improvement
12 de junio de 2026
Coordination fee cap shown on CoinJoin authorization
3 de junio de 2026