High severity7.5OSV Advisory· Published Jan 20, 2026· Updated Jun 17, 2026

CVE-2025-66692

Description

A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service (DoS) via a crafted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trust Wallet/Wallet CoreOSV2 versions
0.0.1, 0.10.0, 0.12.0, …+ 1 more
- (no CPE)range: 0.0.1, 0.10.0, 0.12.0, …
- (no CPE)range: < commit 5668c67
Trust Wallet/Trust Wallet Core
cpe:2.3:a:trustwallet:trust_wallet_core:*:*:*:*:*:*:*:*
Range: <4.4.0
Binance/Trust Wallet Corellm-fuzzy
Range: < commit 5668c67

Patches

Vulnerability mechanics

References

github.com/trustwallet/wallet-core/commit/5668c67nvdPatch
gist.github.com/inkman97/b791189338f73b758c31a7db3cd50c2dnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000