PT-2022-16996 · Silicon · Gecko Bootloader

Name of the Vulnerable Software and Affected Versions: Silicon Labs Gecko Bootloader versions 4.0.1 and earlier Description: The issue is related to an Out-of-Bounds error in the GBL parser, which allows an attacker to overwrite the flash Sign key and OTA decryption key via a malicious bootloader...

Entity Metadata Overwrite

Vault is vulnerable to key overwrite. Deployments where an entity has multiple mount accessors and shared alias names are vulnerable to metadata overwritting in the wrong alias entity...

Zephyr 安全漏洞

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation in the United States. Zephyr suffers from a security vulnerability that stems from the ability to overwrite an existing key during the key distribution phase when the identity address of the key is know...

CVE-2020-15802

A flaw was found in the bluetooth specification that would allow an attacker within bluetooth radio range to abuse a protocol flaw which could allow key-overwrite in services. Mitigation As the bluetooth module will be auto-loaded when required, its use can be disabled by preventing the module fr...

New Unpatched Bluetooth Flaw Lets Hackers Easily Target Nearby Devices

Bluetooth SIG—an organization that oversees the development of Bluetooth standards—today issued a statement informing users and vendors of a newly reported unpatched vulnerability that potentially affects hundreds of millions of devices worldwide. Discovered independently by two separate teams of...