What is GHSA-r5jx-v7f9-8wxc?

GHSA-r5jx-v7f9-8wxc is a security advisory published by GitHub Security Advisories with Critical severity. Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded...

Which CVE IDs does GHSA-r5jx-v7f9-8wxc cover?

GHSA-r5jx-v7f9-8wxc covers the following CVE IDs: CVE-2026-82876. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r5jx-v7f9-8wxc?

GHSA-r5jx-v7f9-8wxc has a CVSS v3 base score of 8.2, published by GitHub Security Advisories.

GHSA-r5jx-v7f9-8wxcCriticalCVSS 8.2

Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded...

Vendor

GitHub Security Advisories

Published

August 31, 2026

Last Modified

August 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-82876 →

📋 Description

Phison PS3111-S11 controller firmware verifies RSA signatures using a public modulus embedded within the firmware image itself rather than anchored in immutable storage. Attackers can generate arbitrary RSA key pairs, sign modified firmware with the private key, embed the matching modulus in the signature segment, and the controller accepts the tampered firmware as valid.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-82876
https://github.com/trulycrisp/psychite
https://trulycrisp.github.io/drivefirmware/phison_s11
https://www.vulncheck.com/advisories/phison-ps3111-s11-controller-firmware-signature-verification-bypass
https://github.com/advisories/GHSA-r5jx-v7f9-8wxc