CVE-2025-21071
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
An out-of-bounds write in handling opcode in the fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
Risk Assessment
A locally privileged attacker could write out-of-bounds memory, potentially leading to privilege escalation or arbitrary code execution.
Recommendation
Update the system to SMR Nov-2025 Release 1 or later.
Other vulnerabilities in fingerprint trustlet
See all- CVE-2025-21072Medium
Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
- CVE-2025-21044Medium
An out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
Original NVD description (English source)
Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS