Out-of-Bounds Write Vulnerability in Samsung Fingerprint Trustlet

CVE-2025-21044

What is CVE-2025-21044?

An out-of-bounds write vulnerability exists in the Samsung fingerprint trustlet, which could allow local privileged attackers to write outside the designated memory boundaries. This flaw, present in versions prior to the SMR Oct-2025 Release 1, poses significant security risks, enabling unauthorized modifications to memory, potentially leading to further exploitation of the device.

References