Kembali ke portal keamanan

Malicious ScriptSig in signed transaction

Dilaporkan pada July 30, 2014

A specially crafted transaction could trigger a buffer overflow and extract the private key. Local interaction with the knowledge of PIN and passphrase was required.

Fixed in firmware 1.3.1.

Dilaporkan oleh Nicolas Bacca
Trezor Model One​

Kerentanan yang teratasi

Dilaporkan komunitas. Diselidiki. Diselesaikan. Karena keamanan Anda tidak pernah opsional.