Stellar signer weight not shown when adding a signer

Gemeldet auf August 8, 2026

When adding a signer to a Stellar account, the device didn’t show the signer’s weight, so a malicious host could give that signer more authority than the user intended. Fixed in firmware 2.12.5.

Gemeldet durch Derek H

Prämie 650 USD

Behobene Sicherheitslücken

Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.

Authenticity proofs not bounded to their secure element on TS7
16. August 2026
Missing bounds check in JPEG image decoding
12. August 2026
E-shop eGift card amount could be set outside the allowed values
7. August 2026
Solana token transfer displays the address lookup table account instead of the token mint
4. August 2026
Solana stake lockup settings not shown when staking
4. August 2026
Ethereum 1inch swap minimum output not shown on the device
1. August 2026