Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Vulnerability Type
使用错误要素进行比较
Vulnerability Title
Tangem 安全漏洞
Vulnerability Description
Tangem是Tangem开源的一个适用于 Android 和 JVM 平台的原生 Kotlin 库。 Tangem 5.18.3之前版本存在安全漏洞，该漏洞源于离线钱包认证存在逻辑缺陷，可能导致验证结果被忽略。
CVSS Information
N/A
Vulnerability Type
N/A