Samsung Fingerprint Trustlet Out-of-Bounds Write Vulnerability Allowing Memory Corruption

A high-severity out-of-bounds write vulnerability has been identified in the fingerprint trustlet, affecting Samsung devices running Android versions 13, 14, 15, and 16. This vulnerability allows local privileged attackers to write to out-of-bounds memory, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability could allow local privileged attackers to cause memory corruption by writing out-of-bounds, which could be leveraged for arbitrary code execution or to create a denial-of-service condition.

Remediation

Users can apply the October 2025 Security Maintenance Release, which includes the patch for this vulnerability. This update is part of the regular monthly security update process and should be available for all applicable models.