A vulnerability has been found in Ledger Nano X, Flex and Stax up to 2.4.1 and classified as problematic. The impacted element is an unknown function of the component MCU Firmware Update Handler. The manipulation of the argument reset_handler leads to improper validation of specified quantity in input.
This vulnerability is referenced as CVE-2025-15645. It is possible to launch the attack on the physical device. No exploit is available.
The affected component should be upgraded.
