CVE-2025-66692: Trustwallet Trust Wallet Core

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5668c67 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected products

• Trustwallet Trust Wallet Core: before 4.4.0 (fixed in 4.4.0)

Published 2026-01-20. Last modified 2026-06-17.