157 matches found
test_avb_key
On Almost Signing Android Builds Introduction An error sometimes encountered by NCC Group consultants is signing Android builds with known private keys. This leaves the device manufacturers and in turn their users vulnerable, even on devices where secure boot is enabled. This blog post has two...
android-hardware-attestation-demo
Android hardware attestation bypass — demo This repository accompanies a Quarkslab article on Android hardware Key Attestation and exists to illustrate it. It is a small, end-to-end proof of concept that shows a simple bypass: an analyst on a rooted phone defeats a backend's hardware attestation...
Multiple Rakuten Mobile smartphones shipped with a known private test key for Android Verified Boot
Overview Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. Use of Weak Credentials CWE-1391 - CVE-2026-107153 Masayoshi Matsubara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...
CVE-2026-107153
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...
CVE-2026-107153
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...
CVE-2026-107153
Multiple smartphones provided by Rakuten Mobile, Inc. are vulnerable because they utilize AOSP test keys for their Android Verified Boot (AVB) functionality. If an attacker has physical access to an affected device, they may be able to install a crafted system image . No specific remediation or e...
EUVD-2026-100836
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...
CVE-2026-107153
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...
PT-2026-113642
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...
CVE-2026-107153: Use of Weak Credentials
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...
Rakuten Mobile Rakuten Mini Trust Management Vulnerability
Rakuten Mobile and Rakuten Mini have vulnerabilities related to trust management. These vulnerabilities stem from the use of the Android Verified Boot AVB feature with AOSP test keys. Attackers could potentially install modified system images by physically accessing affected devices...
Astra Linux – Vulnerability in u-boot
The U-Boot until 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...
CVE-2026-6484
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2026-6484 Lack of verified boot to certain FV may cause arbitrary code execution
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2026-6484
CVE-2026-6484 concerns UEFI firmware where lack of verified boot for certain FV enables arbitrary code execution. The available data indicates a local attack vector with high privileges required and high impact on confidentiality, integrity, and availability (per CVSS 3.1 vector: AV:L/AC:L/PR:H/U...
CVE-2026-6484
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
CVE-2026-6484 Lack of verified boot to certain FV may cause arbitrary code execution
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...
EUVD-2026-57052
In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...