CVE-2025-20904

Name of the Vulnerable Software and Affected Versions mPOS TUI trustlet versions prior to SMR Feb-2025 Release 1

Description The issue allows local privileged attackers to cause memory corruption due to an out-of-bounds write in the mPOS TUI trustlet. This can be exploited by attackers with local privileges.

Recommendations For versions prior to SMR Feb-2025 Release 1, update to SMR Feb-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the mPOS TUI trustlet to minimize the risk of exploitation.