Ledger vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 20263

Newest CVEs

• CVE-2023-7346

  Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript

  Ledger · Ledger Bitcoin app

  Medium4.1
• CVE-2023-7345

  Ledger Live hw-app-eth EIP-712 Message Parsing Integer Truncation

  Ledger · ledgerhq/hw-app-eth

  Medium6.9
• CVE-2025-15645

  Ledger Nano X, Flex, Stax MCU Firmware Update Denial of Service

  Ledger · Ledger Nano X

  Medium5.1
• CVE-2017-2808

  An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially crafted ledger file can cause a…

  Ledger · Ledger CLI

  High7.5
• CVE-2017-2807

  An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially crafted journal file can cause an integer…

  Ledger · Ledger CLI

  High7.5