CVE-2025-21021
BaseFortify
Publication date: 2025-08-06
Last updated on: 2025-08-15
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | blockchain_keystore | to 1.3.17.2 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds write in the drawing pinpad component of Blockchain Keystore versions prior to 1.3.17.2. It allows local attackers with privileged access to write data outside the intended memory boundaries, potentially leading to memory corruption.
How can this vulnerability impact me? :
The vulnerability can allow a local privileged attacker to corrupt memory by writing out-of-bounds, which may lead to unauthorized modification of data or system instability. This could compromise the confidentiality and integrity of sensitive information handled by the Blockchain Keystore.