What is CVE-2023-7345?

CVE-2023-7345 is a medium-severity vulnerability in Ledger Ledgerhq/hw-app-eth, classified under Incorrect Type Conversion or Cast. CVSS score: 6.5/10. Published 2026-05-19.

How severe is CVE-2023-7345?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Ledger Ledgerhq/hw-app-eth

CVE-2023-7345

Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer parsing vulnerability that allows attackers to manipulate EIP-712 typed data messages by exploiting incorrect hexadecimal field parsing when va…

EPSS: 0.000 (9.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Ledger Ledgerhq/hw-app-eth — versions 0
Ledger Live — versions 0

Weakness classification (CWE)

CWE-704 — Incorrect Type Conversion or Cast

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)
disclosure@vulncheck.com (vendor-advisory)

Frequently asked questions

What is CVE-2023-7345?: CVE-2023-7345 is a medium-severity vulnerability in Ledger Ledgerhq/hw-app-eth, classified under Incorrect Type Conversion or Cast. CVSS score: 6.5/10. Published 2026-05-19.
How severe is CVE-2023-7345?: Medium severity. CVSS v3 base score is 6.5 out of 10.