Skip to content
OpenAdvisories

Product · Ledger

Ledger Live

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Ledger Live hw-app-eth EIP-712 Message Parsing Integer Truncation

    Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer parsing vulnerability that allows attackers to manipulate EIP-712 typed data messages by exploiting incorrect hexadecimal field parsing when values contain an odd …