CVE-2021-36689

PoC —

CVSS 3.1

5.5 medium

EPSS

<1%p22

Published

Mar 4, 2023 (Mar 4, 2023)

Modified

Jun 17, 2026

Description

An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attackers to view sensitive information and decrypt data via a brute force attack that uses a recovered samourai.dat file. The PIN is 5 to 8 digits, which may be insufficient in this situation.

Vendors: samourai-wallet-android project
Products: samourai-wallet-android
Weakness: CWE-521
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.