CVE-2023-21507

Out-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.

Score

CVSS 3.1 5.5 Medium

Status

Modified - mobile.security@samsung.com

Published

2023-05-04

Last modified

2025-02-12

Weaknesses

CWE-125

Affected products

• Samsung Blockchain Keystore (Samsung)
• Samsung Blockchain Keystore (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05