CVE-2021-36689

An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attackers to view sensitive information and decrypt data via a brute force attack that uses a recovered samourai.dat file. The PIN is 5 to 8 digits, which may be insufficient in this situation.

• CWE-521

• https://code.samourai.io/wallet/samourai-wallet-android/-/blob/develop/app/src/main/java/com/samourai/wallet/PinEntryActivity.java#L302Third Party Advisory
• https://vrls.ws/posts/2021/08/samourai-wallet-bitcoin-pin-authentication-bypass-crypto/Exploit, Technical Description, Third Party Advisory
• https://code.samourai.io/wallet/samourai-wallet-android/-/blob/develop/app/src/main/java/com/samourai/wallet/PinEntryActivity.java#L302Third Party Advisory
• https://vrls.ws/posts/2021/08/samourai-wallet-bitcoin-pin-authentication-bypass-crypto/Exploit, Technical Description, Third Party Advisory

Published

Mar 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36665An issue was discovered in Druva 6.9.0 for macOS, allows att…7.8
• CVE-2021-36666An issue was discovered in Druva 6.9.0 for MacOS, allows att…7.8
• CVE-2021-36667Command injection vulnerability in Druva inSync 6.9.0 for Ma…7.8
• CVE-2021-36668URL injection in Driva inSync 6.9.0 for MacOS, allows attack…7.8
• CVE-2021-3667An improper locking issue was found in the virStoragePoolLoo…6.5
• CVE-2021-36686Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allow…5.4
• CVE-2021-3669A flaw was found in the Linux kernel. Measuring usage of the…5.5
• CVE-2021-36690A segmentation fault can occur in the sqlite3.exe command-li…7.5
• CVE-2021-36691libjxl v0.5.0 is affected by a Assertion failed issue in lib…7.5
• CVE-2021-36692libjxl v0.3.7 is affected by a Divide By Zero in issue in li…6.5
• CVE-2021-36695Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in D…5.4
• CVE-2021-36696Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in D…5.4