CVE-2023-7346Medium· 4.0▾ Sunlit

Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: f…

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score22/ 100 · Low

impact 22 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

May 20, 2026

Updated

Jul 23, 2026

CVSS

4.0

Vendor

Red Hat

Product

—

CWE

CWE-682

Depth score

22 · Low

EPSS

0.14% · p3

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS history

Exploit-prediction probability, daily snapshots since Jul 31.

0.1% → 0.1%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 72 days

May 20, 2026Published
Disclosed via NVD
Jul 23, 2026Record revised
Last analysed / modified upstream
Jul 31, 2026EPSS first tracked
0.1%

Red Hat CWE-682 #nvd #csaf #vex #red-hat

Full technical detail▾

Overview

Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies that cause the device to derive and display incorrect receiving addresses, potentially leading to funds being sent to unintended addresses.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

Vendor advisories

Red Hat VEX · updated 2026-10-16 · vex

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#csaf#vex#red-hat

← Back to feed