Shapeshift Keepkey Firmware
5 CVEs affecting Shapeshift Keepkey Firmware. Latest disclosed: 2023-05-02. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-31616 | High | 8.8 | 2021-05-06 | Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in… |
CVE-2019-18672 | High | 7.5 | 2019-12-06 | Insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow a partial reset of cryptographic secrets… |
CVE-2018-6875 | High | 7.5 | 2018-03-14 | Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be accessible), related to… |
CVE-2023-27892 | Low | 3.8 | 2023-05-02 | Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cf_con… |
CVE-2019-14355 | Low | 2.4 | 2019-08-10 | On ShapeShift KeepKey devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the nu… |