Samsung Blockchain Keystore vulnerabilities
8 CVEs affecting Samsung Blockchain Keystore, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-21021, published 2025-08-06.
More from Samsung.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2023-30722, published 2023-09-06. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows local attacker to execute arbitrary code.
- CVE-2025-20901, published 2025-02-04. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Out-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to read out-of-bounds memory.
- CVE-2025-21017, published 2025-08-06. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory.
- CVE-2025-21018, published 2025-08-06. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory.
- CVE-2025-20900, published 2025-02-04. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. Out-of-bounds write in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to write out-of-bounds memory.
- CVE-2025-21021, published 2025-08-06. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory.
- CVE-2025-21020, published 2025-08-06. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory.
- CVE-2024-49406, published 2024-11-06. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.