RISC-V MCU design bounds runtime protection-policy delegation
A CVA6-based World Checker adds 7.1% LUT and 1.2% FF for eight rules, with no access-latency or frequency loss.
Stories per day · 30 days
2 RSS
Relatedgoahead3mtls3tls3embedthis2esp322openssl2access-control1certificate-revocation1cva61developer-tools1ecu1emulator1firmware1github1ics1mbedtls1mcu1out-of-bounds-read1
18 stories, newest first · one card per story
Stories tagged #embedded
Tiny world model runs games on a Raspberry Pi Pico 2 W
The Hacker News post links to the tinyworldformer GitHub repo and had 42 points and 4 comments.
Simantic launches a firmware simulator for AI agents
The Rust simulator targets selected STM32, ESP32, and RP2040 boards so agents can test firmware without flashing hardware.
6
GoAhead TLS flaws can ignore CRLs, weaken encryption, or bypass chain limits
FoxIO published PoCs for three configuration-specific bugs; GoAhead 6.1.1 fixes the OpenSSL and Mbed TLS issues.
GoAhead CRL check skip lets revoked client certificates pass mutual TLS
CVE-2026-115881 scores 9.1 on GoAhead 3.4.5–6.1.0 with mutual TLS and a loaded CRL; 6.1.1 fixes it.
Three GoAhead TLS bugs skip CRLs, depth limits, or weaken DH
Fixes are in GoAhead 6.1.1 for the OpenSSL-compatible and mbed TLS cases; a public PoC decrypts weak DHE sessions.
Siemens Capital Embedded AR Classic has remote out-of-bounds read
R20-11 is fixed in V2303, while all 431-422 builds have no planned fix and should stay behind firewalls.
Zeppelin: Client-Side BFV Encryption and Decryption for Helium-Powered Microcontrollers
Zeppelin brings BFV encryption and decryption to Arm Helium microcontrollers, encrypting 4096 values in 4.76 ms.
Contextual Chain: Lightweight Continuity Authentication for Intermittently Connected Devices
Contextual Chain authenticates intermittently connected devices by making shared context memory the attacker's bottleneck.
System-Level Optimization Beyond Cryptographic Kernels: An ML-KEM Case Study on Arm Cortex-M7
Researchers cut ML-KEM cycles on Arm Cortex-M7 by up to 74.6% with system-level optimizations.
wolfSSL 5.9.4 Patches 11 Security Flaws Affecting TLS and Certificate Validation
wolfSSL 5.9.4 fixes 11 TLS and certificate-validation flaws, including trusted-peer and OCSP authentication bypasses.
wolfSSL 5.9.4 Fixes 11 TLS Security Flaws and Expands Post-Quantum Cryptography Support
wolfSSL 5.9.4 patches 11 TLS vulnerabilities, including three high-severity certificate validation bypasses, and adds post-quantum cryptography features.
lwIP (Lightweight IP)
CISA warns lwIP 2.0.1–2.2.1 has a double-free that can crash devices or enable code execution.
2
Benchmarking Post-Quantum Cryptography in Lightweight Virtualization Environments on Embedded Hardware
Study finds container overhead is tiny for PQC, while algorithm choice can swing TLS energy by 1000x.
ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability
ZDI disclosed an unpatched symlink directory traversal flaw (CVE-2026-92205, CVSS 6.1) in BusyBox libarchive enabling arbitrary file creation.
How CHERIoT Provides Strong and Usable Isolation Without an MMU
ACM Queue paper explains how CHERIoT uses CHERI hardware capabilities to give microcontroller-class IoT devices memory and privilege isolation without an MMU.
Memory-safety defects in the upstream (abandoned) AOSP OpenCORE AAC decoder, shipped unpatched by Samsung TizenRT
Abandoned AOSP OpenCORE AAC decoder has out-of-bounds-write and wild-pointer flaws reachable from attacker-controlled frames, unpatched in Samsung TizenRT.
[hardware] Fullhan FH8626V100 - Multiple Vulnerabilities
Multiple vulnerabilities in the Fullhan FH8626V100 hardware chip have been disclosed alongside public proof-of-concept exploits.