セキュリティポータルに戻る
Inability to cancel certain flows on pre-production firmware
報告日:October 31, 2025
In a pre-production firmware for Trezor Safe 7, a user could enter a dialog where pressing Cancel did not actually cancel the flow. This issue occurred only in non-critical paths such as staking delegation or similar actions, not in fund-sending flows.
The issue was present only in a pre-production firmware that was available for small group of people directly after the launch of Safe 7. The fix was already included in the version released to the general public.
修正済みの脆弱性
コミュニティからの報告により、調査を行い、問題を解決しました。あなたのセキュリティは常に最優先です。
- Trezor T Bootloader firmware update retry could skip header checks2026年9月29日
- E-shop referral discount could be applied to eGift card purchases2026年9月16日
- Authenticity proofs not bounded to their secure element on TS72026年8月16日
- Monero payment ID could be signed without being shown2026年8月13日
- Missing bounds check in JPEG image decoding2026年8月12日
- Cardano output datum and reference script not shown in simple transactions2026年8月11日