Read the docs
TI-2023-06709 Aliases CVE-2023-7345GHSA-m3cf-54jv-7mmj

Ledger Live hw-app-eth EIP-712 Message Parsing Integer Truncation

Priority LOW 30CWE-704Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Active
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer parsing vulnerability that allows attackers to manipulate EIP-712 typed data messages by exploiting incorrect hexadecimal field parsing when values contain an odd number of characters. Attackers can obtain signatures on truncated or misinterpreted message values to authorize unintended blockchain transactions, such as asset transfers at incorrect amounts.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00263 18th percentileScored 2026-11-07
Fix Fixed ledgerhq/hw-app-eth (Ledger): 6.34.7Ledger Live (Ledger): 2.70.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Ledgerledgerhq/hw-app-ethbefore 6.34.76.34.7Patch availableCNA
LedgerLedger Livebefore 2.70.02.70.0Patch availableCNA
  • ledgerhq/hw-app-eth VendorLedger Affected before 6.34.7 Fixed in 6.34.7 Patch available CNA
  • Ledger Live VendorLedger Affected before 2.70.0 Fixed in 2.70.0 Patch available CNA

Remediation

  • Fix · CNA ledgerhq/hw-app-eth (Ledger) Fixed in 6.34.7
  • Fix · CNA Ledger Live (Ledger) Fixed in 2.70.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-7345
  2. 2026-10-03 Alias added: GHSA-m3cf-54jv-7mmj

References

Advisory 1

  • TI-2017-02028 Memory corruption in Ledger CLI CVSS 3.0HIGH 7.8
  • TI-2017-02029 Use after free in Ledger CLI CVSS 3.0HIGH 7.8
  • TI-2020-09753 Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF). CVSS 3.1HIGH 8.1
  • TI-2020-05566 A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger… CVSS 3.1MEDIUM 5.5
  • TI-2025-14269 Ledger Nano X, Flex, Stax MCU Firmware Update Denial of Service CVSS 4.0MEDIUM 5.1
  • TI-2023-06710 Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript CVSS 4.0MEDIUM 4.1
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences