セキュリティポータルに戻る

Insufficient field size check in Protobuf

報告日:July 12, 2021

Without this check, an attacker could trick the user into signing a Stellar transaction moving their assets while thinking they are signing a ManageData transaction. Fixed in firmware 1.10.3.

報告者 Stellar Development Foundation
Trezor Model One