Kembali ke portal keamanan

Malicious ScriptSig in signed transaction

Dilaporkan pada July 30, 2014

A specially crafted transaction could trigger a buffer overflow and extract the private key. Local interaction with the knowledge of PIN and passphrase was required.

Fixed in firmware 1.3.1.

Dilaporkan oleh Nicolas Bacca

Trezor Model One

Kerentanan yang teratasi

Dilaporkan komunitas. Diselidiki. Diselesaikan. Karena keamanan Anda tidak pernah opsional.