CVE-2025-66692

A buffer over-read in the PublicKey::verify method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service DoS via a crafted input...

@dylan1951/polywallet (>=0.22.0 <=0.28.0) potentially affected by CVE-2025-66692 via @trustwallet/wallet-core (=4.3.6)

@trustwallet/wallet-core NPM version =4.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on @trustwallet/wallet-core and may be impacted: - @dylan1951/polywallet =0.22.0, =0.28.0 Source cves: CVE-2025-66692 Source advisory:...