CVE-2025-20435Patch

The report circulating about "LDN-2026-0301" is false and based on manipulated screenshots. There is no such vulnerability in Ledger's transport layer, and no firmware update like the one described. The real research from the Ledger Donjon relates to CVE-2025-20435 (https://nvd.nist.gov/vuln/detail/CVE-2026-20435), a vulnerability affecting certain Android phones with MediaTek chips. In a compromised phone scenario, attackers may be able to extract data from software wallets. This highlights an important point: software wallets depend on the security of the phone they run on. If the phone is compromised, sensitive data can be exposed. Hardware wallets are designed to prevent this. Your private keys stay inside the secure element, and the only information you should trust is what appears on your Ledger's secure screen before signing. Ledger follows a zero-trust security model. Whether you connect to a phone or a computer, the device itself shows the final transaction details. If anything were changed by a malicious app or compromised system, it would appear on the device before you approve the transaction. A good reminder for everyone in crypto: screenshots and "reports" can be edited. What matters is what your device shows you before you sign. You can read the details of the real research from our CTO Charles Guillemet here: https://x.com/P3b7_/status/2031753534107001209

As always, the Ledger Donjon followed a strict responsible disclosure process with the relevant vendors, which allowed security fixes to be released. MediaTek confirmed providing a fix to OEMs on Jan 5, 2026. The vulnerability is now public (CVE-2025-20435) https://nvd.nist.gov/vuln/detail/CVE-2026-20435

Your phone's "off" switch was never a lock. CVE-2025-20435: 875M Android devices. USB in. 60 seconds. PIN cracked, encryption stripped, before the OS even blinks. Check your MediaTek chip. Patch now. Or hand-deliver your secrets. https://www.forbes.com/sites/daveywinder/2026/03/15/critical-flaw-875-million-android-phones-at-risk-of-60-second-hack/?streamIndex=0

Good writeup. For Android CVEs, what helps teams most is mapping which builds are exposed version + build date + vendor patch level, not just the CVE text. Https://drbinary.ai can take an Android version/build time and list affected CVEs quickly handy for triage. Does CVE-2025-20435 hinge on a specific component/permission boundaryd

🚨 New Android Security Alert A flaw in MediaTek chips (CVE-2025-20435) could let attackers steal your crypto in under 45 seconds. 🔑 What you should know: • No malware, internet, or password needed • Physical access + USB cable is enough • Attack can extract PINs & seed phrases from popular wallets • Affects many mid-range Android phones globally

Haavoittuvuus (CVE-2025-20435) koskettaa arviolta jopa 25 prosenttia Android-laitteista. Asiantuntijoiden mukaan älypuhelimia ei ole alun perinkään suunniteltu toimimaan digitaalisina kassakaappeina, mikä korostaa laitteistoriskien ymmärtämistä. 🧵 3/5

🚨 SECURITY ALERT: Ledger researchers expose a critical Android chip flaw targeting crypto wallets. Ledger’s Donjon team demonstrated a vulnerability (CVE-2025-20435) in MediaTek processors that could allow attackers with physical access to extract wallet seed phrases in about 45 seconds. Wallets tested include Trust Wallet, Kraken Wallet, and Phantom. #Crypto #Security #Android #Ledger