CVE-2023-7346
MediumCVSS 4.0Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the 'a:' fragment. Attackers can craft malicious miniscript policies that cause the device to derive and display incorrect receiving addresses, potentially leading to funds being sent to unintended addresses.
Risk Assessment
The risk is the potential loss of funds by users who may send Bitcoins to an incorrect address, which is particularly dangerous for hardware wallets where trust in the displayed address is critical.
Recommendation
It is recommended to immediately update the Ledger Bitcoin app to a version newer than 2.1.1, which contains a fix for this vulnerability.
Original NVD description (English source)
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies that cause the device to derive and display incorrect receiving addresses, potentially leading to funds being sent to unintended addresses.