Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-21506 EUVD-2023-25674GHSA-7q9c-c73r-h952

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain K…

Published May 4, 2023 · Updated Feb 12, 2025 · Assigned by Samsung Mobile

Description

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Blockchain Keystore unspecified – < 1.3.12.1 1.3.12.1

Advisories 1

References