Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to trick a user into making two signatures in certain cases, potentially leading to a huge transaction fee. NOTE: this affects all hardware wallets. It was fixed in 1.9.1 for the Trezor One and 2.3.1 for the Trezor Model T.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
@BitcoinKnots @kwsantiago - Efficiency improvements for mining hardware - Fixes poison blocks (CVE-2013-2292) - Unintentional fees (CVE-2020-14199) - Block tx count mutation (CVE-2017-12842) - Block withholding attacks - Temp 800 kWU block weight limit (~300 KB)
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | satoshilabs | trezor_model_t | - | - | - |
| OS | satoshilabs | trezor_model_t_firmware | - | - | - |
| HW | satoshilabs | trezor_one | - | - | - |
| OS | satoshilabs | trezor_one_firmware | - | - | - |