CyberSecBulletin

Binance vulnerabilities

We track 2 vulnerabilities in Binance products across 4 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2024.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Binance vulnerabilities

  • 9.8 Critical severity

    btc: Incorrect Authorization

    CVE-2024-31695Binance

    A misconfiguration in the fingerprint authentication mechanism of Binance: BTC, Crypto and NFTS v2.85.4, allows attackers to bypass authentication when adding a new fingerprint.

  • 7.5 High severity

    Trust Wallet: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

    CVE-2024-23660Binance

    The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trezor-crypto library and consequently generates mnemonic words for which the device time is the only entropy source, leading to economic losses,