TI-2025-24528 CVE-2025-34502 · GHSA-3xvc-wfvf-2p2f
Shuffle Master Deck Mate 2 Missing Secure Boot
Priority LOW 32
Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules.
2 records
Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules.
Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validat…