返回安全门户

Insufficient field size check in Protobuf

报告时间:July 12, 2021

Without this check, an attacker could trick the user into signing a Stellar transaction moving their assets while thinking they are signing a ManageData transaction. Fixed in firmware 1.10.3.

报告人 Stellar Development Foundation
Trezor Model One