Out-of-Bounds Read Vulnerability in Samsung Blockchain Keystore

CVE-2023-21511

What is CVE-2023-21511?

An out-of-bounds read vulnerability exists in the bc_core trustlet of the Samsung Blockchain Keystore, specifically when processing the CMD_COLDWALLET_BTC_SET_PRV_UTXO command. This flaw can be exploited by a local attacker, potentially enabling them to read arbitrary memory contents. The issue impacts versions prior to 1.3.12.1 and poses a risk of unauthorized data disclosure.

References