CVE-2023-21508: Samsung Blockchain Keystore

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code.

Affected products

• Samsung Samsung Blockchain Keystore: before 1.3.12.1 (fixed in 1.3.12.1)

Published 2023-05-04. Last modified 2026-06-17.