The manufacturer of the popular hardware cryptocurrency wallets Ledger reported on the appearance of the alleged bug when using the Monero version 0.14 client with the company's own version 1.1.3 client.
In the last version of monero client 0.14 with application 1.1.3, it seems there is a bug with the change address: The change seems to not be correctly send.
Do not use Ledger Nano S with client 0.14 until more information is provided.
Ledger Crypto Dev @reddit
As noted by Ledger, the initial tests showed that an undesirable effect is a combination of a specific client version with a specific version of the wallet application. At the same time, users who will not conduct transactions with supposedly vulnerable software risk nothing.
Last week, information was disclosed about the vulnerability of Ledger devices related to addresses for returning coins, but in that case the problem affected Bitcoin wallets.