CVE-2025-21072

Medium · 4.4

CVSS

4.4

EPSS

0.1%

Published

Dec 2, 2025

CISA due date

—

The record

Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

Affected packages

Ecosystem	Package	Introduced	Fixed