CVE-2025-69893

MEDIUM EPSS 15.8%

Published Apr 14, 20262mo ago · Modified Jun 17, 20261w ago

4.6 CVSS 3.1

Medium

Published Apr 14, 2026 2mo ago

Last Modified Jun 17, 2026 1w ago

Description

A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor Safe v1.13.0 to v1.14.0 hardware wallets. This originates from the BIP-39 standard guidelines, which induce non-constant time execution and specific branch patterns for word searching. An attacker with physical access during the initial setup phase can collect a single side-channel trace. By utilizing profiling-based Deep Learning Side-Channel Analysis (DL-SCA), the attacker can recover the mnemonic code and subsequently steal the assets. The issue was patched.

CVSS Details

Base Score

4.6

Exploitability

0.9

Impact

3.6

Vector string

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector Physical

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

15.8% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-385

References 2

trezor.com http://trezor.com
trezor.io https://trezor.io/vulnerability/fix-side-channel-in-bip-39-mnemonic-processing-when-unlocked

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.