Samsung Fingerprint Trustlet Out-of-Bounds Write Vulnerability Allowing Memory Corruption

A high-severity out-of-bounds write vulnerability has been identified in the fingerprint trustlet, affecting Samsung devices running Android versions 13, 14, 15, and 16. This vulnerability allows local privileged attackers to write to memory locations outside the intended boundaries, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability allows for out-of-bounds memory writes, which can lead to memory corruption and possibly arbitrary code execution.

Remediation

Users can apply the December 2025 Security Maintenance Release (SMR) to address this vulnerability.