Samsung Blockchain Keystore Out-of-Bounds Write Vulnerability

A high-severity out-of-bounds write vulnerability has been identified in the Blockchain Keystore application, prior to version 1.3.17.2. This vulnerability allows local privileged attackers to write to out-of-bounds memory by exploiting the detaching crypto box feature. The issue arises from inadequate input validation, which has been addressed in the latest version.

Impact

Exploitation of this vulnerability could lead to memory corruption by allowing unauthorized memory writes, potentially causing application crashes or arbitrary code execution.

Remediation

Users can update to Blockchain Keystore version 1.3.17.2 to address this vulnerability.