PT-2025-4182 · Unknown · Blockchain Keystore

Dawuge · Published 2025-02-04 · Updated 2025-07-17 · CVE-2025-20900

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Blockchain Keystore versions prior to 1.3.16.5

Description The issue is related to an out-of-bounds write in the Blockchain Keystore, which allows local privileged attackers to write out-of-bounds memory. This can potentially lead to unauthorized access or modification of sensitive data.

Recommendations For versions prior to 1.3.16.5, update to version 1.3.16.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the Blockchain Keystore to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-20900

Affected Products

Blockchain Keystore

References · 6

• https://osv.dev/vulnerability/CVE-2025-20900 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20900 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=01 · Vendor Advisory
• https://t.me/cvedetector/17163 · Telegram Post
• https://t.me/cvenotify/129253 · Telegram Post
• https://twitter.com/CVEnew/status/1886680222101307817 · Twitter Post