SRAM dump via glitching the firmware update

Reportada en December 27, 2018

Using a special glitching hardware an attacker could trick the device processor into Read Protection level 1 which allows readout of RAM. The issue was fixed by not storing sensitive data in RAM during the firmware update.

Fixed in firmware 1.8.0.

Reportada por wallet.fail

Post en nuestro blog

Trezor Model One, Trezor Model T

Vulnerabilidades solucionadas

Reportada por la comunidad. Investigada. Solucionada. Porque tu seguridad no es una opción.

Trezor T Bootloader firmware update retry could skip header checks
29 de septiembre de 2026
E-shop referral discount could be applied to eGift card purchases
16 de septiembre de 2026
Authenticity proofs not bounded to their secure element on TS7
16 de agosto de 2026
Monero payment ID could be signed without being shown
13 de agosto de 2026
Missing bounds check in JPEG image decoding
12 de agosto de 2026
Cardano output datum and reference script not shown in simple transactions
11 de agosto de 2026