CVEs

Articles related to CVEs that I have been involved in:

CVE-2024-0227

2FA Auth Bypass in devise-two-factor

CVE-2023-39910

Milk Sad - How Weak Entropy can Ruin Your Savings

CVE-2023-39908

Yubico YubiHSM PKCS#11 Library Vulnerability

CVE-2023-27892

KeepKey Memory Exfiltration Vulnerability

CVE-2022-30330

KeepKey Supervisor Vulnerabilities

CVE-2021-43399

Yubico yubihsm-shell Vulnerability

CVE-2021-31616

Exploiting KeepKey CVE-2021-31616 - Part I
KeepKey Stack Buffer Overflow Vulnerability

CVE-2021-27217, CVE-2021-32489

Yubico libyubihsm Vulnerabilities

CVE-2020-24387, CVE-2020-24388

Yubico libyubihsm Vulnerabilities

CVE-2020-16158, CVE-2020-16160, CVE-2020-16161, CVE-2020-16159

GoPro GPMF-parser Vulnerabilities

CVE-2020-13131, CVE-2020-13132

Yubico libykpiv Vulnerabilities

CVE-2019-9578

Yubico libu2f-host Vulnerability - Part Two

CVE-2019-18672

KeepKey Key Erasure Vulnerability

CVE-2019-18671

KeepKey receive buffer vulnerability

CVE-2019-14353, CVE-2019-14354, CVE-2019-14355, CVE-2019-14356, CVE-2019-14357
CVE-2019-14358, CVE-2019-14359, CVE-2019-14360, CVE-2019-18673

OLED Side Channel Observations and Mitigation
OLED Side Channel - Summary October 2019

CVE-2018-20340

Yubico libu2f-host vulnerability - part one

CVEs published by clients on engagements:

CVE-2021-30126

Lightmeter 1.5.1: Important Security Fixes

This list may be incomplete.