CVE-2023-7345 Ledger Live EIP-712整数解析漏洞

/* * PoC Concept for CVE-2023-7345 * Demonstrating the odd-length hex parsing issue */ const vulnerableHex = "0x123"; // Odd length hex string const correctHex = "0x0123"; // Even length hex string (padded) // Simulating the vulnerable parsing behavior function vulnerableParse(hex) { // Vulnerable library might fail to pad odd length strings // causing interpretation errors or truncation if (hex.length % 2 !== 0) { console.log("[VULNERABLE] Odd length detected, potential truncation or parsing error"); // In the specific vulnerability, this leads to signing a different value than intended return parseInt(hex, 16); } return parseInt(hex, 16); } console.log("Parsing vulnerable hex:", vulnerableParse(vulnerableHex)); console.log("Parsing correct hex:", vulnerableParse(correctHex)); // Attack scenario: // Attacker sets 'value' field in EIP-712 data to '0xabc' (odd length). // Ledger Live displays '0xabc' (2748) but signs '0x0abc' (2748) or interprets it differently // depending on implementation, potentially allowing bypass of checks.