CVE:CVE-2023-31290
CNNVD:CNNVD-202304-2150
Trust Wallet Core是Trust Wallet公司的一个开源的、跨平台的、以移动为中心的库。
Trust Wallet Core 3.1.1之前版本、Trust Wallet browser extension 0.0.183之前版本存在安全漏洞，该漏洞源于mt19937 Mersenne Twister 采用单个 32 位值作为输入种子，结果只有 40 亿种可能的助记符。
solution:Upgrade trustwallet trust_wallet_browser_extension to a higher version than 0.0.183,and avoid the version [0.0.172,0.0.183); Upgrade trustwallet trust_wallet_core to a higher version than 3.1.1,and avoid the version (,3.1.1)