PatchTheCVEblockchain keystore vulnerabilities and fixes
Recent CVEs affecting blockchain keystore, with upgrade or downgrade steps. 5 tracked.
Also searched as: blockchainkeystore.
blockchain keystore has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-08-06. Highest priority: CVE-2024-49406 (score 24/100).
- CVE-2025-21021 MEDIUM 5.7 UPGRADE Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged
- CVE-2025-21020 MEDIUM 5.7 UPGRADE Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local pr
- CVE-2025-21018 MEDIUM 4.4 UPGRADE Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read
- CVE-2025-21017 MEDIUM 6.3 UPGRADE Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local priv
- CVE-2024-49406 MEDIUM 6.7 UPGRADE Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attac
FAQ
How do I fix blockchain keystore vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is blockchain keystore being exploited right now?
None of the tracked blockchain keystore CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which blockchain keystore CVE should I patch first?
CVE-2024-49406 currently ranks highest (24/100): Improper validation of integrity check value in Blockchain Keystore prior to version 1.3.16 allows local attac.