Information leak via U2F

[tsusanka]

Impact: Information leak
Scalability: Remote (Unlocked)
Severity: Low
Fixed in: Firmware 1.7.2
Reported by: Christian Reitter
Date reported: 2018-11-26

Details

The C/C++ reference implementation for U2F by Yubico contains broken definition of a struct which can leak bytes from RAM via USB. The bug was fixed by updating the structure definition to a new correct one.

Fix

trezor/trezor-firmware@0b26c52

Read more

• Official blogpost
• Christian's blog