Ledger

Products

ProductCVEsExploitedLatest
Ledger Bitcoin app1–May 20, 2026
Ledger Flex1–May 19, 2026
Ledger Live1–May 19, 2026
Ledger Nano X1–May 19, 2026
Ledger Stax1–May 19, 2026
ledgerhq/hw-app-eth1–May 19, 2026

Exploited and recent CVEs

  • CVE-2023-7346 Medium 4.0 Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript 0.1%
  • CVE-2023-7345 Medium 6.5 Ledger Live hw-app-eth EIP-712 Message Parsing Integer Truncation 0.3%
  • CVE-2023-7345 Medium 6.5 Ledger Live hw-app-eth EIP-712 Message Parsing Integer Truncation 0.3%
  • CVE-2025-15645 Medium 4.6 Ledger Nano X, Flex, Stax MCU Firmware Update Denial of Service 0.2%
  • CVE-2025-15645 Medium 4.6 Ledger Nano X, Flex, Stax MCU Firmware Update Denial of Service 0.2%
  • CVE-2025-15645 Medium 4.6 Ledger Nano X, Flex, Stax MCU Firmware Update Denial of Service 0.2%