CVE-2025-21044

MediumCVSS 5.7

Published: 10/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

An out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

Risk Assessment

A privileged local attacker could exploit this vulnerability to write out-of-bounds memory, potentially leading to privilege escalation or system compromise.

Recommendation

Update the system to the version containing SMR Oct-2025 Release 1 or later to fix the vulnerability in fingerprint trustlet.

Other vulnerabilities in fingerprint trustlet

CVE-2025-21072Medium
Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

Original NVD description (English source)

Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS