Buffer overflow in message processing

[tsusanka]

Impact: Seed Exposure
Scalability: Local (Non-invasive)
Severity: High
Fixed in: Firmware 1.6.2
Reported by: Christian Reitter
Date reported: 2018-05-25

Details

Specially crafted USB packet could trigger a buffer overflow which could lead to code execution on older firmwares.

Fix

trezor/trezor-firmware@c9113fd

Read more

• Official blogpost
• Christian's blog