CVE-2025-21072
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
Risk Assessment
A local privileged attacker could write out-of-bounds memory, potentially leading to memory corruption or arbitrary code execution.
Recommendation
Apply the SMR Dec-2025 Release 1 update or later.
Other vulnerabilities in fingerprint trustlet
See all- CVE-2025-21071Medium
An out-of-bounds write in handling opcode in the fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
- CVE-2025-21044Medium
An out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
Original NVD description (English source)
Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS