{"id":"CVE-2025-66692","details":"A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service (DoS) via a crafted input.","modified":"2026-08-12T15:14:42.526407Z","published":"2026-01-20T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66692.json"},"references":[{"type":"WEB","url":"https://gist.github.com/inkman97/b791189338f73b758c31a7db3cd50c2d"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66692.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66692"},{"type":"FIX","url":"https://github.com/trustwallet/wallet-core/commit/5668c67"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/trustwallet/wallet-core","events":[{"introduced":"0"},{"fixed":"7c78376f1a49ebd97060ff3fa56672db4758944d"},{"fixed":"5668c67"}],"database_specific":{"cpe":"cpe:2.3:a:trustwallet:trust_wallet_core:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"4.4.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["4.3.23","4.3.22","4.3.21","4.3.20","4.3.19","4.3.18","4.3.17","4.3.16","4.3.15","4.3.14","4.3.13","4.3.12","4.3.11","4.3.11-rc2","4.3.10","4.3.9","4.3.8","4.3.7","4.3.6","4.3.5","4.3.4","4.3.3","4.3.2","4.3.1","4.3.0","4.2.21","4.2.20","4.2.19","4.2.18","4.2.17","4.2.16","4.2.15","4.2.14","4.2.13","4.2.12","4.2.11","4.2.10","4.2.9","4.2.8","4.2.7","4.2.6","4.2.5","4.2.4","4.2.3","4.2.2","4.2.1","4.2.0","4.2.0-dev-rc4","4.1.22","4.1.21","4.1.20","4.1.19","4.1.18","4.1.17","4.1.16","4.1.15","4.1.14","4.1.13","4.1.12","4.1.11","4.1.10","4.1.9","4.1.8","4.1.8-rc2","4.1.7","4.1.6","4.1.5","4.1.4","4.1.3","4.1.2","4.1.1","4.1.0","4.0.49","4.0.48","4.0.47","4.0.46","4.0.45","4.0.44","4.0.43","4.0.42","4.0.41","4.0.40","4.0.39","4.0.38","4.0.37","4.0.36","4.0.35","4.0.34","4.0.33","4.0.32","4.0.31","4.0.30","4.0.29","4.0.28","4.0.27","4.0.26","4.0.25","4.0.24","4.0.23","4.0.22","4.0.21","4.0.20","4.0.19","4.0.18","4.0.17","4.0.16","4.0.15","4.0.14","4.0.13","4.0.12","4.0.11","4.0.10","4.0.9","4.0.8","4.0.7","4.0.6","4.0.5","4.0.4","3.3.2","4.0.3","4.0.2","4.0.1","4.0.0","3.2.21","3.2.20","3.2.19","3.2.18","3.2.17","3.2.16","3.2.15","3.2.14","3.2.13","3.2.12","3.2.11","3.2.10","3.2.9","3.2.8","3.2.7","3.2.6","3.2.5","3.2.4","3.2.3","3.2.2","3.2.1","3.2.0","3.1.39","3.1.38","3.1.35","3.1.37","3.1.36","3.1.34","3.1.33","3.1.32","3.1.31","3.1.30","3.1.29","3.1.28","3.1.27","3.1.26","3.1.25","3.1.24","3.1.23","3.1.22","3.1.21","3.1.20","3.1.19","3.1.18","3.1.17","3.1.16","3.1.15","3.1.14","3.1.13","3.1.12","3.1.11","3.1.10","3.1.9","3.1.8","3.1.7","3.1.6","3.1.4","3.1.3","3.1.1","3.1.0","3.0.9","3.0.8","3.0.7","3.0.6","3.0.5","3.0.4","3.0.3","3.0.2","3.0.1","3.0.0","2.9.8","2.9.7","2.9.6","2.9.5","2.9.4","2.9.3","2.9.2","2.9.1","2.9.0","2.8.0","2.7.9","2.7.8","2.7.7","2.7.6","2.7.5","2.7.4","2.7.3","2.7.2","2.7.1","2.7.0","2.6.36","2.6.35","2.6.34","2.6.33","2.6.32","2.6.31","2.6.30","2.6.29","2.6.27","2.6.25","2.6.24","2.6.23","2.6.22","2.6.21","2.6.20","2.6.19","2.6.18","2.6.17","2.6.16","2.6.14","2.6.13","2.6.12","2.6.11","2.6.10","2.6.9","2.6.8","2.6.7","2.6.6","2.6.5","2.6.4","2.6.3","2.6.2","2.6.1","2.6.0","2.5.10","2.5.9","2.5.8","2.5.7","2.5.6","2.5.5","2.5.4","2.5.3","2.5.2","2.5.1","2.5.0","2.4.1","2.4.0","2.3.9","2.3.8","2.3.6","2.3.5","2.3.4","2.3.3","2.3.2","2.3.1","2.3.0","2.2.14","2.2.13","2.2.12","2.2.11","2.2.10","2.2.9","2.2.8","2.2.7","2.2.6","2.2.5","2.2.4","2.2.3","2.2.2","2.2.1","2.2.0","2.1.4","2.1.3","2.1.2","2.1.1","2.1.0","2.0.22","2.0.21","2.0.20","2.0.19","2.0.16","2.0.15","2.0.14","2.0.12","2.0.10","2.0.8","2.0.6","2.0.4","2.0.3","2.0.2","2.0.1","2.0.0","1.0.4","1.0.3","1.0.2","1.0.1","1.0","0.12.33","0.12.32","0.12.31","0.12.30","0.12.29","0.12.28","0.12.27","0.12.26","0.12.25","0.12.24","0.12.23","0.12.22","0.12.21","0.12.19","0.12.18","0.12.17","0.12.16","0.12.15","0.12.14","0.12.13","0.12.12","0.12.11","0.12.10","0.12.9","0.12.8","0.12.7","0.12.6","0.12.5","0.12.4","0.12.1","0.12.0","0.10.0","0.9.1","0.9.0","0.8.1","0.8.0","0.7.2","0.7.1","0.7.0","0.6.1","0.6.0","0.5.3","0.5.2","0.5.0","0.4.0","0.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-66692.json","vanir_signatures_modified":"2026-08-12T15:14:42Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/TWAnySignerTests.cpp","function":"TEST"},"deprecated":false,"digest":{"length":1291,"function_hash":"128324311157585814372525828692126498875"},"id":"CVE-2025-66692-01bb7f06"},{"id":"CVE-2025-66692-0e9efd5f","signature_type":"Line","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/OperationListTests.cpp"},"deprecated":false,"digest":{"line_hashes":["161426400410266580999099866027387227573","65409512503859976687428574672018328646","199979982074297058575534398672435011899","18968693919440429033176533190940011684","15988646266621205800680975724418334131","83625924099062244093436783246232712451","10087909548783869958281713464368576307","109736543117609555986610675761525784245","296020545865413289403770500799684093028","272168467515318038822841374504447579385","15614438404218487512838570378482611255","178503775799112968210907208423355979082"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/OperationListTests.cpp","function":"TEST"},"deprecated":false,"digest":{"function_hash":"75680609184176118852148802074666970838","length":1068},"id":"CVE-2025-66692-12d28017"},{"deprecated":false,"digest":{"function_hash":"56839906555045465743944202583134452761","length":3378},"id":"CVE-2025-66692-199694b1","signature_type":"Function","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/TransactionCompilerTests.cpp","function":"TEST"}},{"deprecated":false,"digest":{"function_hash":"12670646121929595253048164865672845919","length":3126},"id":"CVE-2025-66692-21c9232b","signature_type":"Function","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"src/Tezos/Forging.cpp","function":"forgeOperation"}},{"deprecated":false,"digest":{"function_hash":"108670184771774812786520418231264506638","length":2166},"id":"CVE-2025-66692-51f3d11f","signature_type":"Function","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/SignerTests.cpp","function":"TEST"}},{"source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/OperationListTests.cpp","function":"TEST"},"deprecated":false,"digest":{"function_hash":"19150228631416150635523117925579431158","length":873},"id":"CVE-2025-66692-6716a724","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["222367367422805005860576467203345224181","41819746620106600917543028054803360732","139645983306364128231112219202137159670","53703197254496462379657090240713215482","107965153668320961473716947168549620507","120516098741876344320751525912481004845","120166097479530084360776833342296094876","66949178131777129775911789990486868218"],"threshold":0.9},"id":"CVE-2025-66692-73f70ebb","signature_type":"Line","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/TWAnySignerTests.cpp"},"deprecated":false},{"target":{"file":"tests/chains/Tezos/TransactionCompilerTests.cpp"},"deprecated":false,"digest":{"line_hashes":["63406846354035370150007059868976238408","58492103186208084020827390526245489496","83982506245061677244765623696960144532","32228825131357996867685401053624525970","323889955369329787259415197196957109931","40662712204369644708333388570238551986","211341825303812379774117301752281255531","22769928558285589788986097208108257744","278364210304013446285982841147091121923","119123793082555073209018324286488732693","93383173585980501224682367717489324843","99755290254281743019629801312941505971","319503675832830799550217595116983187104","319907073818836287167732985256754056722","63801128913091499168610714059725039068","43864028704782145506368365294532452474","139976012652314020522512448735086793422","302109163595378183426708618534186567595","318747799108196502557248424382802143776","87867535016862808766241466045596564350","5467096498088820540132888528708421193","157651247630513821979368963223131050817","299005570282706958611764419763566568216","22400309929394748119778826368470138977","43423208951536255556728240763097191228","180475216105056695550692587151121123804","74856366331617219134188884007951438527","284587640762860532635954543979716343111","168742462609214193974973521062114232509","303158131445515624177753225999200610954","726206151801848065592323339995576497","45872052999232469446458897974915258171","188183186228917745669875953079179752889","226900523020937966090160165058716531680","275313491950484808904296103126408467882","259677545161656288519799954848238838509","51109387386748291869375745839413452367","230860089064520448880016061385157638730","208218395739264079127441679055794950617","75255789037924771875095430291262535434","299292252985248883630500418341158590470","306862962504878689332045217482201119988","191851726402935344311641125341544419741","33790541690325846160996395487811181813","91583905488438021542697421199533449978","176650738954643703078054403511824144468","187534442447268257124369995876185162549","83797017477897336080373166608201756578","83688312851896560690123391665992761444","274841845701126529551183444476907308312","73094257955861484419772110632370825955","333822529380259333955437502722412232859","221637509253447501725492251901892977120","248691789813096817455929428346325924005","85165626006121445703460627622305601945","196809364984480688502685764442898438869","57943971045842178472998754652069792628","146167509830031954908412721476188273940","193075631435937802483251490248589519113","125612962062293597957660743206333844145","72723203821941065464734030225828227150","186252238789294394858111509769983523365","13101416970655460128961102539447493002","315647162683758068752754792301908816178","80147303798397040569233510538265257668","213841877345517971129072745730511844473"],"threshold":0.9},"id":"CVE-2025-66692-9ac76085","signature_type":"Line","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d"},{"source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/SignerTests.cpp"},"deprecated":false,"digest":{"line_hashes":["57746345415150007798169043097026939231","199551690813602841600949686504899450589","230336851192380334432999105259049734447","87906687962814845055839822592779539416"],"threshold":0.9},"id":"CVE-2025-66692-9ec3a646","signature_type":"Line","signature_version":"v1"},{"target":{"file":"src/Tezos/Forging.cpp"},"deprecated":false,"digest":{"line_hashes":["25693463484828518699815710209160278608","103030737157757505378161210496267315548","263974296215128760492634246856608361642","205105758624094931456303622625420217726"],"threshold":0.9},"id":"CVE-2025-66692-c3371c36","signature_type":"Line","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d"},{"source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/TWAnySignerTests.cpp","function":"TEST"},"deprecated":false,"digest":{"function_hash":"90319036644329392172366045010433711509","length":1777},"id":"CVE-2025-66692-cd6c0445","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":784,"function_hash":"39191557353719571909807436113129044799"},"id":"CVE-2025-66692-d557fccb","signature_type":"Function","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/ForgingTests.cpp","function":"TEST"}},{"deprecated":false,"digest":{"function_hash":"237950203488547456504736154993680439695","length":1626},"id":"CVE-2025-66692-e002e404","signature_type":"Function","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/OperationListTests.cpp","function":"TEST"}},{"deprecated":false,"digest":{"line_hashes":["271428216193847111225307099917608535150","324294790195694275177459709762808441764","272639345092881803923462183920923466357","136459896436734276202480960608176803173"],"threshold":0.9},"id":"CVE-2025-66692-fab41694","signature_type":"Line","signature_version":"v1","source":"https://github.com/trustwallet/wallet-core/commit/7c78376f1a49ebd97060ff3fa56672db4758944d","target":{"file":"tests/chains/Tezos/ForgingTests.cpp"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}