CVEvulnerability

CVE-2018-6875

7.5 HIGH Published 2018-03-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-134

Description

Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display (of information that should not be accessible), related to text containing characters that the device's font lacks.

Affected configurations

• shapeshift keepkey firmware 4.0.0

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References