CVE-2023-21509

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

Score

CVSS 3.1 7.8 High

Status

Modified - mobile.security@samsung.com

Published

2023-05-04

Last modified

2025-02-12

Weaknesses

CWE-787

Affected products

• Samsung Blockchain Keystore (Samsung)
• Samsung Blockchain Keystore (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05