Kembali ke portal keamanan
Insufficient field size check in Protobuf
Dilaporkan pada July 12, 2021
Without this check, an attacker could trick the user into signing a Stellar transaction moving their assets while thinking they are signing a ManageData transaction. Fixed in firmware 1.10.3.
Kerentanan yang teratasi
Dilaporkan komunitas. Diselidiki. Diselesaikan. Karena keamanan Anda tidak pernah opsional.
- Trezor T Bootloader firmware update retry could skip header checks29 September 2026
- E-shop referral discount could be applied to eGift card purchases16 September 2026
- Authenticity proofs not bounded to their secure element on TS716 Agustus 2026
- Monero payment ID could be signed without being shown13 Agustus 2026
- Missing bounds check in JPEG image decoding12 Agustus 2026
- Cardano output datum and reference script not shown in simple transactions11 Agustus 2026