EUVD-2021-13143

Malware in sbrugna...

SUSE CVE-2021-46766

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality...

PT-2024-38: Improper Access Control in GigaDevice Semiconductor products

The vulnerability of improper access control was identified in series GD32E23x and GD32E50x of GigaDevice Semiconductor products. The vulnerability allows an attacker to obtain a snapshot of SRAM or change its state. The vulnerability can be exploited when checking the protection state...

CVE-2020-27208

The flash read-out protection RDP level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface...

CVE-2020-27208

The flash read-out protection RDP level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade the RDP level and access secrets such as private ECC keys from SRAM via the debug interface...