123 matches found
android-hardware-attestation-demo
Android 하드웨어 증명 우회 — 데모 이 저장소는 Android 하드웨어 키 증명Key Attestation에 관한 Quarkslab 기사와 함께 제공되며, 이를 예시로 보여주기 위해 존재합니다. 루팅된 휴대폰의 분석가가 릴레이relaying를 통해 백엔드의 하드웨어 증명 검사를 우회하는 간단한 방법을 보여주는 소규모 엔드투엔드 개념 증명입니다. 어떤 것도 위조되지 않습니다. 수정되지 않은 장치에서 생성되고 백엔드 자체 논스nonce에 바인딩된 진짜 증명 체인이 루팅된 장치의 거부된 체인 대신 전달됩니다. 범위 및 윤리....
test_avb_key
Android 빌드 서명에 관한 거의 모든 것 소개 NCC Group 컨설턴트들이 가끔 마주치는 오류는 알려진 개인 키known private key로 Android 빌드를 서명하는 것입니다. 이는 보안 부팅secure boot이 활성화된 기기에서조차 제조사그리고 결과적으로 사용자를 취약하게 만듭니다. 이 블로그 포스트의 목표는 두 가지입니다: 이 문제에 대한 인식 제고 Android 빌드가 잘못되게 알려진 개인 키로 서명되었는지 빠르게 확인하기 위한 스크립트 소개 Android 기반 기기가 부팅되면, 먼저 부트로더가 서명된...
CVE-2026-6484
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2026-6484
CVE-2026-6484 concerns UEFI firmware where lack of verified boot for certain FV enables arbitrary code execution. The available data indicates a local attack vector with high privileges required and high impact on confidentiality, integrity, and availability (per CVSS 3.1 vector: AV:L/AC:L/PR:H/U...
CVE-2026-6484 Lack of verified boot to certain FV may cause arbitrary code execution
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
EUVD-2026-57052
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2026-6484
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
PT-2026-70961
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
Siemens RuggedCom Rox Improper Input Validation (CVE-2020-10648)
Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration. This plugin only works with Tenable.ot. Please visit...
CVE-2026-47222
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot AVB vbmeta image parser in NanaZip via the upstream 7-Zip AvbHandler. An unsigned integer underflow in a...
CVE-2026-47223 NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot AVB vbmeta image parser in NanaZip via the upstream 7-Zip AvbHandler. A 32-bit unsigned integer overflow ...
CVE-2026-47223 NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot AVB vbmeta image parser in NanaZip via the upstream 7-Zip AvbHandler. A 32-bit unsigned integer overflow ...
CVE-2026-47223 NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot AVB vbmeta image parser in NanaZip via the upstream 7-Zip AvbHandler. A 32-bit unsigned integer overflow ...
CVE-2026-47222 NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot AVB vbmeta image parser in NanaZip via the upstream 7-Zip AvbHandler. An unsigned integer underflow in a...
CVE-2026-47222 NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot AVB vbmeta image parser in NanaZip via the upstream 7-Zip AvbHandler. An unsigned integer underflow in a...
EUVD-2026-36506
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot AVB vbmeta image parser in NanaZip via the upstream 7-Zip AvbHandler. An unsigned integer underflow in a...
PT-2026-48944
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 3.0.1000.0 to before version 6.0.1698.0, a heap out-of-bounds read exists in the Android Verified Boot AVB vbmeta image parser in NanaZip via the upstream 7-Zip AvbHandler. A 32-bit unsigned integer overflow ...
PT-2026-48929
Name of the Vulnerable Software and Affected Versions NanaZip versions 3.0.1000.0 through 6.0.1697.0 Description A heap out-of-bounds read exists in the Android Verified Boot AVB vbmeta image parser via the upstream 7-Zip AvbHandler. An unsigned integer underflow in a bounds check allows an...
Astra Linux - уязвимость в u-boot
The U-Boot until 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...