CVE-2020-11683

AT91bootstrap (before 3.9.2) contains a timing side-channel vulnerability that enables attackers with physical access to forge CMAC values and boot arbitrary code on affected systems. The issue is triggered by a timing side channel in the boot process, allowing potential control over execution af...

CVE-2020-11684

CVE-2020-11684 affects AT91bootstrap prior to 3.9.2. The issue is that encryption and authentication keys are not properly wiped from memory before control is passed to a less privileged component, enabling potential disclosure of keys and enabling unauthorized modification or signing of the next...