SRAM dump via glitching the firmware update

Dilaporkan pada December 27, 2018

Using a special glitching hardware an attacker could trick the device processor into Read Protection level 1 which allows readout of RAM. The issue was fixed by not storing sensitive data in RAM during the firmware update.

Fixed in firmware 1.8.0.

Dilaporkan oleh wallet.fail

Postingan blog kami

Trezor Model One, Trezor Model T

Kerentanan yang teratasi

Dilaporkan komunitas. Diselidiki. Diselesaikan. Karena keamanan Anda tidak pernah opsional.

Trezor T Bootloader firmware update retry could skip header checks
29 September 2026
E-shop referral discount could be applied to eGift card purchases
16 September 2026
Authenticity proofs not bounded to their secure element on TS7
16 Agustus 2026
Monero payment ID could be signed without being shown
13 Agustus 2026
Missing bounds check in JPEG image decoding
12 Agustus 2026
Cardano output datum and reference script not shown in simple transactions
11 Agustus 2026