Skip to content
Sign in
6.7 Medium

CVE-2023-21506 Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from…

Description

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

Affected products and versions

Product Affected versions Fixed in
Samsung Blockchain Keystore 1.3 earliest → < 1.3.12.1 1.3.12.1

Other CVEs of Samsung Blockchain Keystore

The 7 CVEs of Samsung Blockchain Keystore →
CVE-2023-30722 Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows… 5.5 Medium CVE-2023-21511 Out-of-bounds Read vulnerability while processing CMD_COLDWALLET_BTC_SET_PRV_UTXO in bc_core trustlet from Samsung… 4.4 Medium CVE-2023-21507 Out-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from… 4.4 Medium CVE-2023-21508 Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung… 6.7 Medium
Track this CVE