CVE-2019-18671

CVE-2019-18671 affects the ShapeShift KeepKey hardware wallet. Insufficient checks in USB packet handling allow out-of-bounds writes in the .bss segment on firmware up to 6.2.1, with potential code execution or other impact. The issue can be triggered by unauthenticated users and is reachable via...

CVE-2022-30330

KeepKey firmware prior to 7.3.2 is affected. The issue stems from flaws in the supervisor interface, specifically improper handling of the svhandler_flash_* address range checks in lib/board/supervise.c, which can allow malicious firmware to bypass firmware-operation restrictions, elevate privile...