CVEs & Vulnerabilities
In the course of our research activities, team members of Kasper & Oswald have been involved in discovering and reporting a number of security issues and vulnerabilities:
2026
- Download More RAM memory aliasing attacks on Windows VBS: CVE-2026-23670
- DisARMed memory aliasing attacks on ARM TrustZone from userspace
- DDRop interposer attacks on Intel TDX, Intel SGX and AMD SEV-SNP.
- Racing against the clock: side-channel leakage from clock domain crossings on NXP i.MX RT1160
2025
- Battering RAM interposer attacks on Intel SGX and AMD SEV-SNP.
2024
- BadRAM memory aliasing attacks on AMD SEV-SNP: CVE-2024-21944
2023
- Fortanix EnclaveOS: CVE-2023-38021, CVE-2023-38022
- SCONE: CVE-2023-38023
- Microsoft Open Enclave: CVE-2023-37479
2022
- PMFault attacks on Supermicro server motherboards: CVE-2022-43309
- Intel SGX SDK: CVE-2022-26509
- SCONE: CVE-2022-46486, CVE-2022-46487
2021
- VoltPillager fault attacks on Intel SGX
- STM8 bootloader fault injection vulnerability: paper
- NXP LPC1xxx series bootloader vulnerability: paper
- Occlum: CVE-2021-44421
- Samsung Internet: CVE-2021-25348, CVE-2021-25419 (paper)
- Samsung Knox SDP SDK: CVE-2021-25417
2020
- Attacks on DST80 automotive cipher: Toyota, Kia, Hyundai and Tesla
- PLATYPUS side-channel attacks on Intel CPUs: CVE-2020-8694 and CVE-2020-8695
- PLATYPUS side-channel attacks on AMD: CVE-2020-12912
- Intel SGX SDK: CVE-2020-0561
- Microsoft Open Enclave: CVE-2020-15107
- Fortanix-EDP: Rust compiler patch: paper
- Samsung Secure Folder: CVE-2020-26606
- Huawei Private Space: CVE-2020-9119
- Opera for Android: CVE-2020-6159
2019
- Plundervolt fault attacks on Intel SGX: CVE-2019-11157
- Intel SGX SDK: CVE-2019-14565
- Microsoft Open Enclave: CVE-2019-0876, CVE-2019-1369, CVE-2019-1370
- Fortanix-EDP: Rust compiler patch: paper
2018
- Attacks on the AUT64 automotive cipher: paper
2017
- Attacks on Dexcom G4 Continuous Glucose Monitoring System: paper
2016
- Attacks on VW group and Hitag 2 car keys: paper
2015
- Side-channel attacks on Maxim DS28E01 and DS2432: paper
2014
- Side-channel attacks on Altera Stratix III FPGAs bitstream encryption: paper
2013
- Side-channel attacks on Altera Stratix II FPGA bitstream encryption: paper
- Side-channel attacks on the Yubikey 2: paper
- Attacks on the SimonsVoss digital locking system 3060 G2: paper
2011
- Side-channel attacks on the DESFire MF3ICD40 RFID card: paper
- Side-channel attacks on Xilinx Virtex II FPGA bitstream encryption: paper
2008
- Side-channel attacks on Keeloq door openers: paper