7 matches found
CVE-2019-14356
On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be...
Coinkite Coldcard MK1 and Coldcard MK2 Information Disclosure Vulnerabilities
The Coinkite Coldcard MK1 and Coldcard MK2 are both hardware-based bitcoin wallet devices from Coinkite, Inc. An information disclosure vulnerability exists in Coinkite Coldcard MK1 and Coldcard MK2. An attacker could exploit the vulnerability to recover sensitive data, such as PIN and BIP39...
CVE-2019-14356
On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be...
CVE-2019-14356
On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be...
CVE-2019-14356
On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be...
CVE-2019-14356
CVE-2019-14356 affects Coldcard MK1 and MK2 devices. A side-channel in the OLED row-based display lets an attacker who can control or monitor USB power measurements during times secrets are shown partially recover display contents, potentially exposing PINs and BIP39 mnemonics. The vulnerability ...
PT-2019-13635 · Coinkite · Coldcard Mk1 +1
Name of the Vulnerable Software and Affected Versions: Coldcard MK1 and MK2 devices affected versions not specified Description: A side channel vulnerability was found in the row-based OLED display of Coldcard devices. The power consumption of each display cycle depends on the number of illuminat...