Vulnerabilities in NASA CryptoLib
SecMate reported vulnerabilities in NASA CryptoLib. This post covers the six public GitHub Security Advisories affecting the KMC crypto service client …
Security
CVE-2026-20753: Integer Overflow in Slim Bootloader's ext2 Reader
SecMate researchers discovered CVE-2026-20753 in Intel Slim Bootloader: a crafted ext2 superblock could make the bootloader under-allocate its group …
Four Vulnerabilities in Tuya's Arduino TuyaOpen Framework
SecMate found four vulnerabilities in Tuya’s arduino-tuyaopen framework: a DNS heap overflow, an out-of-bounds read in DP handling, a heap …
Memory Safety Vulnerabilities in Renesas FSP Cryptographic and Networking Code
SecMate found seven vulnerabilities in Renesas FSP for RA microcontrollers. The most relevant cases affect RSA verification, AES-XTS finalization, GCM …
Six Vulnerabilities in Siemens SICAM SIAPP SDK
SecMate identified six vulnerabilities in Siemens SICAM SIAPP SDK before version 2.1.7. Five of the affected code paths were present in the public …
Four Memory Safety Vulnerabilities in Golioth's IoT Firmware
We found four memory safety vulnerabilities in Golioth’s IoT firmware SDK and Pouch BLE protocol. Each is independently triggerable under its …
Rust Support in SecMate: Two CVEs in RustFS
SecMate adds Rust support to its AI-powered vulnerability scanner. Our first Rust target? RustFS, where we found an authentication bypass and a remote …
How SecMate Discovered two Vulnerabilities in libcoap
We built an AI-powered vulnerability scanner for embedded systems. Our first real-world test found two vulnerabilities in libcoap, including an …
Is Vibe Coding a Security Nightmare? A Benchmark of AI Coding Agents
We benchmark 5 AI coding assistants across 240 code samples and find a 71.6% security issue rate. Is AI-powered vibe coding creating security …