Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 24

Out-of-bounds Read vulnerability while processing CMD_COLDWALLET_BTC_SET_PRV_UTXO in bc_core trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00171 Published 2023-05-04 Fixed in 1.3.12.1 CWE-125
Priority LOW 24

Out-of-bounds Read vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00171 Published 2023-05-04 Fixed in 1.3.12.1 CWE-125
Priority LOW 35

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2023-05-04 Fixed in 1.3.12.1 CWE-787
Priority LOW 35

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2023-05-04 Fixed in 1.3.12.1 CWE-787
Priority LOW 24

Out-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00171 Published 2023-05-04 Fixed in 1.3.12.1 CWE-125
Priority LOW 35

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00195 Published 2023-05-04 Fixed in 1.3.12.1 CWE-787