Samsung Blockchain Keystore — known CVE vulnerabilities

Every CVE whose affected-product data names Samsung Blockchain Keystore, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2024-49406 — CVSS 6.7 (medium): Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction…
• CVE-2025-21017 — CVSS 6.3 (medium): Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write…
• CVE-2025-20900 — CVSS 6.3 (medium): Out-of-bounds write in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to write out-of-bounds memory.
• CVE-2025-21021 — CVSS 5.7 (medium): Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write…
• CVE-2025-21020 — CVSS 5.7 (medium): Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write…
• CVE-2023-30722 — CVSS 5.5 (medium): Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows local attacker to execute…
• CVE-2025-21018 — CVSS 4.4 (medium): Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory.
• CVE-2025-20901 — CVSS 4.4 (medium): Out-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to read out-of-bounds memory.