PT-2026-24811 · Undefined · Undefined

Publicado 2026-03-11 · Atualizado 2026-03-16 · CVE-2025-20435

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Android phones with MediaTek chips (affected versions not specified)

Description A flaw exists in MediaTek chips that could allow attackers to steal cryptocurrency. The attack requires physical access to the device and a USB cable. Attackers can extract PINs and seed phrases from popular wallets, such as Trust Wallet, Kraken Wallet, and Phantom, in under 45 seconds, without needing malware, internet access, or a password. Approximately 875 million Android devices are potentially affected. The vulnerability allows attackers to bypass the operating system's security measures and access sensitive data. The vulnerability affects the transport layer of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2025-20435

Produtos afetados

Undefined

Referências · 7

• https://twitter.com/Ledger/status/2032466333745484093 · Publicação no Twitter
• https://twitter.com/P3b7_/status/2031753543997063364 · Publicação no Twitter
• https://reddit.com/r/NOTHING/comments/1rsgbc3/security_cve202620435_critical_mediatek · Publicação no Reddit
• https://twitter.com/geeknik/status/2033396559501566403 · Publicação no Twitter
• https://reddit.com/r/NothingTech/comments/1rsgcla/security_cve202620435_critical_mediatek · Publicação no Reddit
• https://twitter.com/CCNCitizens/status/2032038367936840036 · Publicação no Twitter
• https://twitter.com/The_NewsCrypto/status/2031984625547907520 · Publicação no Twitter