Read the docs
TI-2024-32991 Aliases CVE-2024-49406GHSA-hfcw-9cjp-85w4

Improper validation of integrity check value in Blockchain Keystore prior to version…

Priority LOW 30CWE-354Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00102 0th percentileScored 2026-11-07
Fix Fixed Blockchain Keystore (Samsung Mobile): 1.3.16

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungBlockchain Keystore—1.3.16Patch availableCNA
  • Blockchain Keystore VendorSamsung Affected — Fixed in 1.3.16 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:samsung:blockchain_keystore:*:*:*:*:*:*:*:*before 1.3.16VulnerableSamsung
  • cpe:2.3:a:samsung:blockchain_keystore:*:*:*:*:*:*:*:* Versions before 1.3.16 Vulnerable ·Samsung

Remediation

  • Fix · CNA Blockchain Keystore (Samsung Mobile) Fixed in 1.3.16

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-49406
  2. 2026-10-03 Alias added: GHSA-hfcw-9cjp-85w4

References

Advisory 1

  • TI-2023-14536 Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to… CVSS 3.1HIGH 7.8
  • TI-2025-15017 Out-of-bounds write in Samsung Blockchain Keystore CVSS 3.1MEDIUM 6.7
  • TI-2025-15016 Out-of-bounds write in Samsung Blockchain Keystore CVSS 3.1MEDIUM 6.7
  • TI-2025-15013 Out-of-bounds write in Samsung Blockchain Keystore CVSS 3.1MEDIUM 6.7
  • TI-2025-14896 Out-of-bounds write in Samsung Blockchain Keystore CVSS 3.1MEDIUM 6.3
  • TI-2025-15014 Out-of-bounds read in Samsung Blockchain Keystore CVSS 3.1MEDIUM 4.4
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences