Skip to content
OpenAdvisories
Low · 3.2 CVE-2025-27839 EUVD-2025-7815GHSA-jmqj-768c-pw4r

operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genui…

Published Mar 7, 2025 · Updated Mar 10, 2025 · Assigned by mitre

Description

operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible.

Affected products

VendorProductAffectedFixed
Tangem SDK < 5.18.3 5.18.3

References