CVE-2020-14474

CVE-2020-14474 affects Cellebrite UFED 5.0–7.5.0.845. The vulnerability arises from hardcoded AES key material used for decryption, present both in executable code and in encrypted headers/files via a key enveloping technique. The recovered key material is identical across devices of the same sof...

CVE-2020-11723

CVE-2020-11723 affects Cellebrite UFED versions 5.0–7.29. The flaw stems from four hardcoded RSA private keys used to authenticate to the ADB daemon on target devices, enabling potential unauthorized placement of evidence during forensic extractions. Technical details from the Zebra family of sou...