Zurück zum Sicherheitsportal
Insufficient field size check in Protobuf
Gemeldet auf July 12, 2021
Without this check, an attacker could trick the user into signing a Stellar transaction moving their assets while thinking they are signing a ManageData transaction. Fixed in firmware 1.10.3.
Gemeldet durch Stellar Development Foundation
Behobene Sicherheitslücken
Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.
- Inability to cancel certain flows on pre-production firmware31. Oktober 2025
- Donjon's Trezor Safe 3 evaluation12. November 2024
- Missing confirmation in the ECDHSessionKey call26. November 2023
- XSS in Trezor Connect legacy versions7. Februar 2023
- XSS in Trezor Connect3. August 2020
- Missing path isolation check14. Juli 2020