Voltar para o portal de segurança

Information leak via U2F

Reportado em November 26, 2018

The C/C++ reference implementation for U2F by Yubico contains broken definition of a struct which can leak bytes from RAM via USB. The bug was fixed by updating the structure definition to a new correct one.

Fixed in 1.7.2. Read more at Christian's blog.

Reportado por Christian Reitter
Trezor Model One

Vulnerabilidades resolvidas

Reportado pela comunidade. Investigado. Resolvido. Porque sua segurança nunca é opcional.