Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-21508 EUVD-2023-25676GHSA-5jfx-mqq9-92pr

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystor…

Published May 4, 2023 · Updated Feb 12, 2025 · Assigned by Samsung Mobile

Description

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Blockchain Keystore unspecified – < 1.3.12.1 1.3.12.1

Advisories 1

References