Brute Force Vulnerability in Streetside Samourai Wallet by Samourai

CVE-2021-36689

Summary

In the Streetside Samourai Wallet version 0.99.96i, an issue occurs in the PinEntryActivity.java component which permits attackers to exploit the PIN verification mechanism. By leveraging a compromised samourai.dat file, an attacker can conduct brute force attempts on 5 to 8 digit PINs, potentially exposing sensitive user information. This vulnerability highlights the importance of stronger PIN configurations to prevent unauthorized access.

References