Ledger Discloses Two Vulnerabilities in Ethereum App

Hardware wallet provider Ledger released version 1.22.3 of its Ethereum application on August 25 and disclosed two signature-related vulnerabilities on August 27. Both flaws involve a discrepancy between the information displayed on the device screen and the actual data being signed by the user.