CVE Feed

    Dashboard / CVE / CVE-2025-66692

    CVE-2025-66692

    A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service (DoS) via a crafted input.

    Published:Jan 20, 2026
    Last Modified:Jan 30, 2026
    EPS:Jan 20, 2026
    EPSS Score:0.00052
    CVSS Score:7.5

    Affected Products

    Vendor
    Trustwallet
    Product
    Trust Wallet Core

    Exploits

    https://gist.github.com/inkman97/b791189338f73b758c31a7db3cd50c2d

    Common Weakness Enumeration

    CWE-126 Buffer Over-read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High