CertiK Finds OOB Write Flaw in BitBox02 Hardware Wallet

Crypto security firm CertiK has identified an out-of-bounds write vulnerability in the BitBox02 hardware wallet. According to the disclosure, the issue affected how the BitBox02 firmware handled a specific USB HID control request.

The firmware accepted a length value controlled by the connected host without checking it against the size of the destination buffer. This allowed an attacker to cause data to be written outside the intended memory area, potentially leading to a control-flow hijack.

The vulnerability was found in July and has since been fixed in the Oeschinen security update. CertiK credited researcher Guanxing Wen for reporting the issue, who had previously identified a vulnerability in Ledger's MCU firmware update process through its bug bounty program.