What changed, and why it matters
This commit simply swaps in a newer pre-built bootloader binary for the T3W1 hardware model used in QA/testing, and updates the matching hash list so the firmware recognizes it. There is no source-code change, no description of a security fix, and no public reference linking it to a vulnerability.
No immediate security action is required based on this commit alone. If reviewing for security, inspect the source changes between bootloader versions 2.1.14.0 and 2.1.15.0 to determine whether the update addresses any security-relevant issue.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff replaces core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin with a new version (2.1.15.0, up from 2.1.14.0) and updates the corresponding SHA-256 hashes in bootloader_hashes.h. The change is a routine binary/hash refresh for a QA bootloader. The actual bootloader source diff is not included, so no specific security issue can be identified from this commit alone.
Changed components
T3W1 QA bootloader binaryT3W1 bootloader hash definitionsInspect captured patch +3 / −3
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin b/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin
index 53b4a5ea..f2aa8506 100755
Binary files a/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin and b/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin differ
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
index f20cf740..6d05e619 100644
--- a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
+++ b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
@@ -8,9 +8,9 @@
#define BOOTLOADER_T3W1_00 {0x40, 0x27, 0xda, 0xbc, 0x7c, 0x6b, 0x31, 0x02, 0x32, 0xef, 0x77, 0x65, 0x89, 0x2c, 0xc6, 0x83, 0x72, 0x60, 0x1f, 0x88, 0xc9, 0xc0, 0x96, 0xb3, 0x4e, 0x10, 0x64, 0x05, 0x26, 0xa5, 0xbd, 0x6a}
#define BOOTLOADER_T3W1_FF {0x40, 0x27, 0xda, 0xbc, 0x7c, 0x6b, 0x31, 0x02, 0x32, 0xef, 0x77, 0x65, 0x89, 0x2c, 0xc6, 0x83, 0x72, 0x60, 0x1f, 0x88, 0xc9, 0xc0, 0x96, 0xb3, 0x4e, 0x10, 0x64, 0x05, 0x26, 0xa5, 0xbd, 0x6a}
-// bootloader_T3W1_qa.bin version 2.1.14.0
-#define BOOTLOADER_T3W1_QA_00 {0x2c, 0xaa, 0xcf, 0x3f, 0x6b, 0x6b, 0x13, 0xaa, 0x14, 0x13, 0x64, 0xfd, 0xcc, 0xc7, 0xf2, 0xb8, 0xed, 0x80, 0xd8, 0x3d, 0x39, 0x5e, 0x57, 0xfe, 0x6f, 0x18, 0x36, 0xe3, 0x0f, 0x0b, 0x86, 0x86}
-#define BOOTLOADER_T3W1_QA_FF {0x2c, 0xaa, 0xcf, 0x3f, 0x6b, 0x6b, 0x13, 0xaa, 0x14, 0x13, 0x64, 0xfd, 0xcc, 0xc7, 0xf2, 0xb8, 0xed, 0x80, 0xd8, 0x3d, 0x39, 0x5e, 0x57, 0xfe, 0x6f, 0x18, 0x36, 0xe3, 0x0f, 0x0b, 0x86, 0x86}
+// bootloader_T3W1_qa.bin version 2.1.15.0
+#define BOOTLOADER_T3W1_QA_00 {0x13, 0x24, 0x8a, 0xd9, 0xb1, 0xbd, 0x94, 0xe9, 0x06, 0x4c, 0x83, 0x3a, 0xea, 0xec, 0x19, 0xf7, 0x7d, 0x6a, 0x39, 0x7d, 0x44, 0xf4, 0x1b, 0x2f, 0x69, 0x5a, 0x8c, 0xf0, 0xad, 0x2c, 0x1d, 0x22}
+#define BOOTLOADER_T3W1_QA_FF {0x13, 0x24, 0x8a, 0xd9, 0xb1, 0xbd, 0x94, 0xe9, 0x06, 0x4c, 0x83, 0x3a, 0xea, 0xec, 0x19, 0xf7, 0x7d, 0x6a, 0x39, 0x7d, 0x44, 0xf4, 0x1b, 0x2f, 0x69, 0x5a, 0x8c, 0xf0, 0xad, 0x2c, 0x1d, 0x22}
// clang-format on
Why this scored 3/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.