Out-of-Bounds Write Vulnerability in KnoxVault Trustlet by Samsung

CVE-2025-20983

What is CVE-2025-20983?

An out-of-bounds write vulnerability has been identified in the KnoxVault trustlet, which could allow local attackers with privileged access to write beyond the intended memory boundaries. This flaw exists in the authentication secret handling prior to the SMR July 2025 Release 1, potentially exposing affected devices to further security risks or exploitation. Maintaining up-to-date security patches is crucial for safeguarding your Samsung device against such vulnerabilities.

References