CVE-2024-49406: Samsung Blockchain Keystore

Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.

Affected products

• Samsung Blockchain Keystore: before 1.3.16 (fixed in 1.3.16)

Published 2024-11-06. Last modified 2026-06-17.