Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

shapeshift / keepkey_firmware CVEs

Beta · best-effort

5 CVEs tagged to shapeshift / keepkey_firmware — 0 Critical, 3 High, 0 Medium, 2 Low, 0 Unrated.

See this archive with more filters Back to shapeshift vendor archive

CVE-2023-27892

Published May 2, 2023

Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cf_confirmExecTx() in ethe…

CVSS 3.8 · Low

Vendor/product tagsBeta · best-effort

CVE-2021-31616

Published May 6, 2021

Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereum_extractThor…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2019-18672

Published Dec 6, 2019

Insufficient checks in the finite state machine of the ShapeShift KeepKey hardware wallet before firmware 6.2.2 allow a partial reset of cryptographic secrets to known values via…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2019-14355

Published Aug 10, 2019

On ShapeShift KeepKey devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated…

CVSS 2.4 · Low

Vendor/product tagsBeta · best-effort

CVE-2018-6875

Published Mar 14, 2018

Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be accessible), related to text containing cha…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1