HSM security with CI Fuzz

 

Vulnerabilities in HSM components are one of the most critical issues in automotive software. Once shipped, erroneous HSMs are difficult to update and can in the worst case induce callbacks.

 

At Code Intelligence, we have found RCEs, Buffer Overflows, Heap Use After Free and other severe vulnerabilities and bugs in automotive HSMs. In this Whitepaper, we will show you how we did it.