← Database

CVE-2025-20987

MEDIUM CVSS: 5.2 Published: 2025-06-04 Modified: 2026-06-17

Description

Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token.

Affected Platforms

Samsung Android

Weakness Type

NVD-CWE-noinfo

References