CVE-2023-27892

5.7 mediumEPSS 0.5%

Medium (5.7) in shapeshift keepkey firmware. EPSS 0.5% chance of exploitation in the next 30 days.

Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cf_confirmExecTx() in ethereum_contracts.c can be used to reveal arbitrary microcontroller memory on the device screen or crash the device. With physical access to a PIN-unlocked device, attackers can extract the BIP39 mnemonic secret from the hardware wallet.

Severity

CVSS 3.1

5.7 medium

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWEs: CWE-125, CWE-120
Published: 2023-05-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

shapeshift:keepkey_firmware

References

https://blog.inhq.net/posts/keepkey-CVE-2023-27892/
https://github.com/keepkey/keepkey-firmware/pull/337
https://blog.inhq.net/posts/keepkey-CVE-2023-27892/
https://github.com/keepkey/keepkey-firmware/pull/337

Check your stack JSON