PT-2023-18266 · Samsung · Samsung Blockchain Keystore

F4Lt + 3 · Publicado 2023-05-04 · Atualizado 2023-05-11 · CVE-2023-21510

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Blockchain Keystore versions prior to 1.3.12.1

Description The issue is related to an Out-of-bounds Read while processing BC TUI CMD UPDATE SCREEN in the bc tui trustlet. This allows a local attacker to read arbitrary memory.

Recommendations For versions prior to 1.3.12.1, update to version 1.3.12.1 or later to resolve the issue.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2023-21510

Produtos afetados

Samsung Blockchain Keystore

Referências · 3

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-21510 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-21510 · Aviso do Fabricante