CVE-2025-21071

Medium · 4.4

CVSS

4.4

EPSS

0.1%

Published

Nov 5, 2025

CISA due date

—

The record

Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

Affected packages

Ecosystem	Package	Introduced	Fixed