Skip to content
OpenAdvisories
Medium · 5.2 CVE-2025-20989 EUVD-2025-16831GHSA-2j95-mj22-p6c3

Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac_key.

Published Jun 4, 2025 · Updated Jun 4, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac_key.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Jun-2025 Release in Android 13, 14, 15

Advisories 2

References