| Title | Gwelltimes Technology Yoosee Smart Camera GM8135S 21.00.01.36 Insufficient Verification of Data Authenticity |
|---|
| Description | The Yoosee Smart Camera (GM8135S SoC) fails to verify the authenticity and integrity of its firmware and transmitted data. The device does not perform cryptographic signature verification, integrity checks, or secure boot validation at any stage of operation. This allows an attacker with physical access to extract, modify, and reflash the SPI flash firmware without detection. |
|---|
| Source | ⚠️ https://akosibrylle.me/writeups/yoosee-cve |
|---|
| User | brylleee (UID 101717) |
|---|
| Submission | 09/29/2026 05:32 (1 month ago) |
|---|
| Moderation | 10/25/2026 09:38 (26 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 426184 [Yoosee GM8135S Camera 21.00.01.36 Secure Boot signature verification] |
|---|
| Points | 19 |
|---|