Skip to content
OpenAdvisories

Vendor

Trezor

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Trezor Safe improper security check in on-device display

    Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum sign_tx / sign_tx_eip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed cal…