19 matches found
CVE-2023-7346
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies...
CVE-2023-7346
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies...
CVE-2023-7346 Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies...
CVE-2023-7346
Technical details (affected versions, exploit methods, mitigations) are not publicly provided in the supplied documents. Monitor for updates from official sources.
EUVD-2023-60577
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies...
CVE-2023-7346 Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies...
PT-2026-42182
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies...
CVE-2024-44073
The Miniscript aka rust-miniscript library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth...
PT-2025-17866 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A critical bug in the Rust-Miniscript satisfier causes crashes when compiling certain threshold descriptors, such as 3-of-3 with mixed conditions. No funds were lost due to this issue...
Miniscript allows stack consumption
The Miniscript aka rust-miniscript library for Rust allows stack consumption because it does not properly track tree depth...
baru (>=0.2.0 <=0.4.0), bdk (>=0.2.0 <=1.0.0-alpha.9) +105 more potentially affected by CVE-2024-44073 via miniscript (>=0.12.0 <=8.0.2)
miniscript CARGO version =0.12.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.3.0, =0.6.0, =0.2.0, =0.1.0, =0.4.0, =0.3.0, =1.0.0, =0.0.1, =0.1.0, =0.3.1 and more Source cves: CVE-2024-44073 Source advisory: OSV:GHSA-RV9V-R4VM-GJ8X...
GHSA-RV9V-R4VM-GJ8X Miniscript allows stack consumption
The Miniscript aka rust-miniscript library for Rust allows stack consumption because it does not properly track tree depth...
CVE-2024-44073
The Miniscript aka rust-miniscript library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth...
CVE-2024-44073
The Miniscript aka rust-miniscript library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth...
CVE-2024-44073
The Miniscript aka rust-miniscript library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth...
CVE-2024-44073
The Miniscript aka rust-miniscript library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth...
CVE-2024-44073
CVE-2024-44073 affects the Miniscript (rust-miniscript) library for Rust, with versions prior to 12.2.0. The issue is a stack consumption vulnerability caused by improper tracking of tree depth in the Miniscript parser/engine. Impact is described as stack exhaustion, with an overall CVSSv3.1 base...
Miniscript 安全漏洞
Miniscript is a Rust Bitcoin open source library for working with Miniscript. A security vulnerability exists in versions of Miniscript prior to 12.2.0 that stems from a failure to properly track the depth of a tree, thereby consuming the stack...
PT-2024-30937 · Unknown · Miniscript
Name of the Vulnerable Software and Affected Versions: Miniscript library versions prior to 12.2.0 Description: The issue allows stack consumption because the Miniscript library does not properly track tree depth. Recommendations: For versions prior to 12.2.0, update to version 12.2.0 or later to...