https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 11:02:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-16461 EUVD-2026-16461 https://cve.radiocsirt.org/vuln/euvd-2026-16461 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30330 <p>In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader code to compromise the hardware wallet across reboots or storage wipes.</p> <p>In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmware operations. Using these flaws, malicious firmware code can elevate privileges, permanently make the device inoperable or overwrite the trusted bootloader code to compromise the hardware wallet across reboots or storage wipes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-30330 https://cve.radiocsirt.org/vuln/ghsa-g75w-vcgr-6v4q <p>In the KeepKey firmware before 7.3.2, the bootloader can be exploited in unusual situations in which the attacker has physical access, convinces the victim to install malicious firmware, or knows the victim&#39;s seed phrase. lib/board/supervise.c mishandles svhandler_flash_* address range checks. If exploited, any installed malware could persist even after wiping the device and resetting the firmware.</p> <p>In the KeepKey firmware before 7.3.2, the bootloader can be exploited in unusual situations in which the attacker has physical access, convinces the victim to install malicious firmware, or knows the victim&#39;s seed phrase. lib/board/supervise.c mishandles svhandler_flash_* address range checks. If exploited, any installed malware could persist even after wiping the device and resetting the firmware.</p> https://cve.radiocsirt.org/vuln/ghsa-g75w-vcgr-6v4q https://cve.radiocsirt.org/vuln/gsd-2022-30330 gsd-2022-30330 https://cve.radiocsirt.org/vuln/gsd-2022-30330