Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

trezor/trezor-firmware

              main @ 83228b2
            

270

Fixes

CVEs

CRITICAL

Peak severity

21.2%

Coverage

Highlights

Auth Bypass: 95 prior fixes. Scrutinize any change in this area.

legacy/firmware/signing.c: most-fixed (14 issues). Treat as high-risk during review.

191 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Evaluations in platform-specific security checks, such as STM32U5 bootloader lock verification, used incorrect logical operator precedence, potentially allowing bootloader-related security policies to be bypassed.

Auth Bypass: Derivation path and multisig fingerprint checks were missing or bypassed during Bitcoin transaction signing, which allowed attackers to construct transactions that silently redirected change outputs from multisig inputs to single-sig destinations.

Side-channel Attack: DEC decryption tags and MAC operations in GCM and ChaCha20Poly1305 wrappers were evaluated using standard inequality operators, exposing the device to secret key or plaintext timing side-channel attacks.