CVE-2025-20937

Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2025-20905

CVE-2025-20905 concerns the mPOS TUI trustlet. The issue is an out-of-bounds read and write in versions prior to Samsung SMR Feb-2025 Release 1, enabling local privileged attackers to read and write memory out-of-bounds. Impact is described as high for confidentiality, integrity, and availability...