Ledger Nano Devices Denial-of-Service Vulnerability in MCU Firmware Update Process

A denial-of-service vulnerability has been identified in the MCU firmware update process of Ledger Nano X, Flex, and Stax devices, all prior to their respective latest versions. The vulnerability arises from inadequate validation of the reset_handler parameter during firmware flashing. This flaw allows an attacker to supply a crafted reset_handler address that points to invalid memory or attacker-controlled code. Exploiting this vulnerability can cause the device to enter an unrecoverable fault state during boot, leading to a permanent loss of functionality.

Impact

Exploitation of this vulnerability causes the device to enter an unrecoverable fault state during boot, resulting in a permanent loss of operability.