Description
Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the reset_handler parameter during firmware flashing. An attacker can provide a crafted reset_handler address pointing to invalid memory or attacker-controlled code to cause the device to enter an unrecoverable fault state during boot, resulting in permanent loss of operability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ledger | Ledger Nano X | < 2.4.2 | 2.4.2 |
| Ledger | Ledger Flex | < 1.2.2 | 1.2.2 |
| Ledger | Ledger Stax | < 1.6.2 | 1.6.2 |
References
- Ledger Security Bulletin 021 vendor-advisory
- https://www.vulncheck.com/advisories/ledger-nano-x-flex-stax-mcu-firmware-update-denial-of-service third-party-advisory