it is severe in rating, not critical do you use bitbox? update the app and firmware, action is required but not urgent unless you recieve silent payments to addresses managed by bitbox imho you should always run the latest firmware you should personally verify app checksums and signatures, everytime to update them you should activate firmware checksum displayed by bootloader when device starts, verify these with your eyeballs