CVE-2023-7346
Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript
- State
- Published
- Severity
- 4.1 Medium
- Published
- May 20, 2026
- Updated
- Aug 14, 2026
- Reserved
- May 20, 2026
Description
Ledger Bitcoin app versions 2.1.0 and 2.1.1 contain an address derivation vulnerability that allows attackers to cause incorrect Bitcoin addresses to be displayed by exploiting improper handling of miniscript policies containing the a: fragment. Attackers can craft malicious miniscript policies that cause the device to derive and display incorrect receiving addresses, potentially leading to funds being sent to unintended addresses.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.1 Medium | CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 4.0 Medium | CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N | VulnCheck |
Weaknesses
- CWE-682 Incorrect Calculation
Affected Products
| Product | Versions |
|---|---|
Ledger Bitcoin appLedger |
|
References
- Ledger Security Bulletin 019vendor-advisory
- https://www.vulncheck.com/advisories/ledger-bitcoin-app-address-derivation-error-via-miniscriptthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.