CVE-2023-21510

Samsung Blockchain Keystore bc_tui trustlet prior to version 1.3.12.1 is affected by an out-of-bounds read when processing BC_TUI_CMD_UPDATE_SCREEN, allowing a local attacker to read arbitrary memory. Upgrade to 1.3.12.1 or later to remediate.

freezeOperator will not be able to freeze an operator

Lines of code Vulnerability details Impact freezeOperator will not be able to freeze an operator address in blockchain reorg situation Proof of Concept canSlash function is relying on block.number as it should be lower than contractCanSlashOperatorUntilBlock. that will work fine until a reorg on...

CVE-2023-21506

Out-of-bounds Write vulnerability while processing BCTUICMDSENDRESOURCEDATAARRAY command in bctui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code...

CVE-2023-21511

Out-of-bounds Read vulnerability while processing CMDCOLDWALLETBTCSETPRVUTXO in bccore trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory...

SAMSUNG Blockchain Keystore 缓冲区错误漏洞

SAMSUNG Blockchain Keystore is Samsung's system tool for creating, storing, managing, and backing up private keys. A security vulnerability exists in Samsung Blockchain Keystore versions prior to 1.3.12.1 that stems from an out-of-bounds read vulnerability when handling CMDCOLDWALLETBTCSETPRVUTXO...

CVE-2023-21506

Out-of-bounds Write vulnerability while processing BCTUICMDSENDRESOURCEDATAARRAY command in bctui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code...

CVE-2023-21509

The CVE-2023-21509 issue affects Samsung Blockchain Keystore, specifically the bc_tui trustlet. It is caused by an out-of-bounds write when processing BC_TUI_CMD_UPDATE_SCREEN, allowing a local attacker to execute arbitrary code. Affected are versions prior to 1.3.12.1; updating to 1.3.12.1 or la...

SAMSUNG Blockchain Keystore 缓冲区错误漏洞

SAMSUNG Blockchain Keystore is Samsung's system tool for creating, storing, managing, and backing up private keys. A security vulnerability exists in SAMSUNG Blockchain Keystore versions prior to 1.3.12.1, which stems from an out-of-bounds read vulnerability when processing BCTUICMDUPDATESCREEN...

CVE-2023-21508

The CVE-2023-21508 issue affects Samsung Blockchain Keystore’s bc_tui trustlet, where an out-of-bounds write occurs while processing the BC_TUI_CMD_SEND_RESOURCE_DATA command. The vulnerability exists in versions prior to 1.3.12.1 and can allow a local attacker to execute arbitrary code. Public d...

CVE-2023-21508

Out-of-bounds Write vulnerability while processing BCTUICMDSENDRESOURCEDATA command in bctui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code...

SAMSUNG Blockchain Keystore 缓冲区错误漏洞

SAMSUNG Blockchain Keystore is Samsung's system tool for creating, storing, managing, and backing up private keys. A security vulnerability exists in SAMSUNG Blockchain Keystore versions prior to 1.3.12.1, which stems from an out-of-bounds write vulnerability when processing the...

CVE-2023-21510

Out-of-bounds Read vulnerability while processing BCTUICMDUPDATESCREEN in bctui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory...

CVE-2023-21509

Out-of-bounds Write vulnerability while processing BCTUICMDUPDATESCREEN in bctui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code...

PT-2023-18262 · Samsung · Samsung Blockchain Keystore

Name of the Vulnerable Software and Affected Versions: Samsung Blockchain Keystore versions prior to 1.3.12.1 Description: The issue is related to an Out-of-bounds Read while processing the BC TUI CMD SEND RESOURCE DATA ARRAY command in the bc tui trustlet. This allows a local attacker to read...

PT-2023-18261 · Samsung · Samsung Blockchain Keystore

Name of the Vulnerable Software and Affected Versions: Samsung Blockchain Keystore versions prior to 1.3.12.1 Description: The issue is related to an Out-of-bounds Write vulnerability that occurs while processing the BC TUI CMD SEND RESOURCE DATA ARRAY command in the bc tui trustlet. This allows ...

CVE-2023-21509

Out-of-bounds Write vulnerability while processing BCTUICMDUPDATESCREEN in bctui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code...

Malicious code in 3a-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbd096556ffc90070942d3750f4d790cad77115f15c0e3b8aec5d6788bc817d8 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in 3a-look (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9a61325b2b1ed4acb6eb7991d48682f56a090fbf84663645a94f4d8415e5b00b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in algo-svnlook (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 43c5a376e52bfedce15db5be9f98c7b41f7f9b385af24f412be974fa117f22a4 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-1547 Malicious code in algo-svnlook (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 43c5a376e52bfedce15db5be9f98c7b41f7f9b385af24f412be974fa117f22a4 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...