CVE-2024-49406

Summary

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileBlockchain Keystore1.3.16unaffected

Weaknesses

  • CWE-354 Improper Validation of Integrity Check Value

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References