CVE-2025-27839

operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible.

operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible.

operations/attestation/AttestationTask.kt en el SDK de Tangem anterior a la versión 5.18.3 para Android tiene un flujo lógico en la certificación de billetera sin conexión (verificación de autenticidad) que hace que los resultados de la verificación se ignoren durante el primer escaneo de una tarjeta. Es posible que no haya sido posible explotarlo.