Skip to content
OpenAdvisories
Medium · 5.2 CVE-2025-20987 EUVD-2025-16833GHSA-j92w-fw9q-66rf

Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token.

Published Jun 4, 2025 · Updated Jun 4, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Jun-2025 Release in Android 13, 14, 15

Advisories 2

References