CVE-2025-21071 - Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory

Back Back to CVE browser

MEDIUM

Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory

Published Nov 5, 2025

5.7

MEDIUM

CVSS 3.1

EPSS 0.12%

Description

Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-37806
Advisory
https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=11
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-37806		Advisory
https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=11		Vendor Advisory