Lucene search
+L

6 matches found

Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•28 views

PT-2026-78355

Name of the Vulnerable Software and Affected Versions Ingenic T31 SoC affected versions not specified Description The boot ROM flash-boot verification path in the Ingenic T31 SoC incorrectly compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256...

6.4CVSS5.7AI score0.00127EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/19 12:00 a.m.•47 views

CVE-2026-50720

The Ingenic T31 SoC contains a vulnerability in the boot ROM flash-boot verification path where it only compares a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest. This improper cryptographic verification allows an attacker with physical w...

6.4CVSS5.8AI score0.00127EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/19 12:00 a.m.•50 views

CVE-2026-50720

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

0.00127EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/19 12:00 a.m.•44 views

EUVD-2026-62480

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

5.1AI score0.00127EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/18 6:19 p.m.•19 views

CVE-2026-75625

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers can supply substituted content with...

9.1CVSS0.00241EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/18 5:56 p.m.•23 views

EUVD-2026-61139

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers can supply substituted content with...

9.1CVSS5.8AI score0.00241EPSS
SaveExploits0References4
Rows per page
Query Builder