← Back

CVE-2024-49406

nvd nist
Published: Nov 6, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.4
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Exploitability: 0.8 / Impact: 3.6
Source: NVD

Description

Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attackers to modify transaction. Root privilege is required for triggering this vulnerability.

Affected (1)

Samsung
1 product
Blockchain Keystore
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Blockchain Keystore
Before 1.3.16

Related CWEs

CWE-354
Improper Validation of Integrity Check Value
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

References (1)

Source: mobile.security@samsung.com
Vendor Advisory

Timeline

No history available yet.