Out-of-Bounds Write Vulnerability in Blockchain Keystore by Samsung

CVE-2025-21021

What is CVE-2025-21021?

The vulnerability allows local privileged attackers to exploit an out-of-bounds write in the drawing pinpad feature of the Blockchain Keystore. This can lead to unintended memory manipulation if the attacking party has local access to the device. The flaw affects all versions prior to 1.3.17.2, making it imperative for users to upgrade to the latest version to ensure their security.

References