CVEvulnerability

CVE-2025-27839

3.2 LOW Published 2025-03-08 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-03-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.2 LOW — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Weaknesses
CWE-1025

Description

operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible.

Related

Weakness · CWE (1)

  • CWE-1025 Comparison Using Wrong Factors weakness

References