CVE-2026-127928

The MCUboot bootloader contains a vulnerability where plaintext per-image AES keys remain in dead stack memory after handling encrypted images during serial-recovery . Specifically, the functions decrypt_image_inplace() and boot_image_validate_encrypted() in boot_serial_encryption.c fail to clear...