Samsung Blockchain Keystore Out-of-Bounds Write Vulnerability

A high-severity out-of-bounds write vulnerability has been identified in the Blockchain Keystore application, prior to version 1.3.17.2. This vulnerability allows local privileged attackers to write to out-of-bounds memory by exploiting improper input validation when creating bitmap images. The issue has been addressed in version 1.3.17.2.

Impact

Exploitation of this vulnerability allows for out-of-bounds memory writes, which can lead to memory corruption and potentially allow for arbitrary code execution.

Remediation

Users can update to Blockchain Keystore version 1.3.17.2 to address this vulnerability.