Out-of-Bounds Read Vulnerability in Blockchain Keystore from Samsung Mobile
CVE-2025-21018

4.4MEDIUM

Key Information:

Vendor

Samsung
Status
Blockchain Keystore
Vendor
CVE Published:
6 August 2025

What is CVE-2025-21018?

A vulnerability in the Blockchain Keystore prior to version 1.3.17.2 permits local privileged attackers to access and read out-of-bounds memory. This flaw can be exploited to leak sensitive information and compromise system integrity. Affected users should upgrade to the latest version to mitigate these risks.

Affected Version(s)

Blockchain Keystore 1.3.17.2

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.