Missing path isolation check

[tsusanka]

Impact: Theft of Funds
Scalability: Remote (Interaction)
Severity: Critical
Fixed in: Firmware 1.9.2
Reported by: Yura Pakhuchiy
Date reported: 2018-03-01

Details

Without this check, an attacker could trick the user into signing a Bitcoin transaction while thinking they are signing a testnet or altcoin transaction.

Fix

trezor/trezor-firmware@568da98

Read more

Official blogpost