CWE-1326
CVEs classified under CWE-1326, newest first.
2 CVEsRSS
CVE-2025-34503NoneDeck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity
Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to run arbitrary code that persists across reboots. Because th…
▾ SunlitEPSS 0.13%via NVD
CVE-2025-34502NoneDeck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules
Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with physical access can modify or replace the bootloader, kerne…
▾ SunlitEPSS 0.21%via NVD