GCVE-110-BRLY-2025-002

Advisory Published

Vulnetix · Advisory published March 20, 2025

BRLY-2025-002 High BINARLY REsearch team has received information that Clevo firmware update packages are being distributed with private keys for Boot Guard: https://github.com/binarly-io/SupplyChainAttacks/issues/6. The Binarly REsearch team checked an internal dataset of firmware images for the use of leaked keys across different vendors and discovered several affected devices, some of which had received updates only a few months ago.

Download JSON Open in Console

References

Boot Guard cannot be trusted on multiple Clevo-based devices (the private RSA keys for the Key Manifest and Boot Policy Manifest has been leaked)

advisory

Browse GCVE Records

67,893 records in the GCVE database · Updated August 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON