Zurück zum Sicherheitsportal

Insufficient field size check in Protobuf

Gemeldet auf July 12, 2021

Without this check, an attacker could trick the user into signing a Stellar transaction moving their assets while thinking they are signing a ManageData transaction. Fixed in firmware 1.10.3.

Gemeldet durch Stellar Development Foundation
Trezor Model One