← Back

At91bootstrap

at91bootstrap

Vendor: Linux4sam • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-11684
1Linux4sam
1At91bootstrap
Jun 17, 2026
Sep 14, 2020
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component. This can be exploited to disclose these keys and subsequent...Show more
AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component. This can be exploited to disclose these keys and subsequently encrypt and sign the next boot stage (such as the bootloader).Show less
CVE-2020-11683
1Linux4sam
1At91bootstrap
Jun 17, 2026
Sep 14, 2020
N/A· v4
6.8 MEDIUM· v3
4.6 MEDIUM· v2
A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently boot arbitrary code on an affected system.