Race condition in recovery

[tsusanka]

Impact: Seed Exposure
Scalability: Local (Non-invasive)
Severity: High
Fixed in: Firmware 1.6.2
Reported by: Christian Reitter
Date reported: 2018-05-25

Details

Specially crafted USB communication could trigger a stack overflow in recovery which could lead to code execution.

Fix

trezor/trezor-firmware@c9113fd

Read more

• Official blogpost
• Christian's blog