CVE-2025-27839CWE-1025

operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that…

Low · published March 7, 2025

CVSS v3.1
3.2
EPSS
0%
Percentile
28.7
In the wild
Unconfirmed
What it is

operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible.

The record
Technical detail
CVSS v3.1
3.2 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00361 · 28.7th percentile
Weakness
CWE-1025 · Comparison Using Wrong Factors
Published
2025-03-07T00:00Z
EPSS history
Timeline
  • 07 MAR 00:00Z
    operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that…
    cvelistv5