Ledger-cli - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2026-05-20.

Products

CVE-2023-7346 - CVSS 4.1 (medium), 2026-05-20: Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be…
CVE-2025-15645 - CVSS 5.1 (medium), 2026-05-19: Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the…
CVE-2017-2807 - CVSS 7.8 (high), 2017-09-05: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an…
CVE-2017-2808 - CVSS 7.8 (high), 2017-09-05: An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a…
CVE-2017-12482 - CVSS 7.8 (high), 2017-08-04: The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and…
CVE-2017-12481 - CVSS 7.8 (high), 2017-08-04: The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash)…