Out-of-Bounds Write Vulnerability in Samsung Fingerprint Trustlet
CVE-2025-21044
5.7MEDIUM
What is CVE-2025-21044?
An out-of-bounds write vulnerability exists in the Samsung fingerprint trustlet, which could allow local privileged attackers to write outside the designated memory boundaries. This flaw, present in versions prior to the SMR Oct-2025 Release 1, poses significant security risks, enabling unauthorized modifications to memory, potentially leading to further exploitation of the device.
Affected Version(s)
Samsung Mobile Devices SMR Oct-2025 Release in Android 13, 14, 15, 16
References
CVSS V3.1
Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved