📚 ShapeShift KeepKey Hardware Wallet up to 7.0.x Message ethereum.c ethereum_extractThorchainSwapData buffer overflow

A vulnerability, which was classified as critical, has been found in ShapeShift KeepKey Hardware Wallet up to 7.0.x. This issue affects the function ethereum_extractThorchainSwapData of the file ethereum.c of the component Message Handler. Upgrading to version 7.1.0 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version. ...