https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:07:15.584571+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352554 EUVD-2026-352554 2026-10-05T13:07:15.628991+00:00 EUVD-2026-352554 https://cve.radiocsirt.org/vuln/fkie_cve-2023-7346 fkie_cve-2023-7346 2026-10-05T13:07:15.629027+00:00

Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies that cause the device to derive and display incorrect receiving addresses, potentially leading to funds being sent to unintended addresses.

 https://cve.radiocsirt.org/vuln/ghsa-329m-69cj-4486 GHSA-329m-69cj-4486 2026-10-05T13:07:15.629060+00:00

Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies that cause the device to derive and display incorrect receiving addresses, potentially leading to funds being sent to unintended addresses.