CVE-2025-21072

MediumCVSS 5.7

Published: 02/12/2025(UTC)Updated: 26/09/2026(UTC)Translated: 26/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

Risk Assessment

A local privileged attacker could write out-of-bounds memory, potentially leading to memory corruption or arbitrary code execution.

Recommendation

Apply the SMR Dec-2025 Release 1 update or later.

Other vulnerabilities in fingerprint trustlet

CVE-2025-21044Medium
An out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

Original NVD description (English source)

Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS