Out-of-Bounds Write Vulnerability in Keymaster Trustlet by Samsung

CVE-2025-20937

What is CVE-2025-20937?

The Keymaster trustlet contains a vulnerability that allows local privileged attackers to write to memory locations outside the bounds of allocated memory. This may lead to unauthorized actions and compromise system integrity, especially in scenarios where sensitive functionalities are reliant on the Keymaster trustlet. The issue exists in versions prior to the SMR May-2025 Release 1, emphasizing the need for timely updates to mitigate potential security risks.

References