Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
onflow/ledger-app-flow
develop @ 6ca4df2
3
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Cryptographic Misuse: 1 prior fix. Scrutinize any change in this area.
app/src/crypto.c: most-fixed (1 issue). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Cryptographic Misuse: Deriving curve and hash type from HD path instead of explicit options allows an attacker to influence algorithm selection, weakening signatures or enabling unintended operations.
Integer Overflow: RLP length prefix accumulation without a cap on len_len can overflow bufferLen, leading to undersized buffers and subsequent memory corruption.
Out-of-bounds Write: Authorizer array is fixed-size (16) but no check on authorizer_count before write, allowing overflow when parsing transactions with excessive authorizers.