CVE-2025-20937

Name of the Vulnerable Software and Affected Versions Keymaster trustlet versions prior to SMR May-2025 Release 1

Description The issue is an out-of-bounds write in the Keymaster trustlet, allowing local privileged attackers to write out-of-bounds memory. This can be exploited by local privileged attackers.

Recommendations For versions prior to SMR May-2025 Release 1, update to SMR May-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Keymaster trustlet to minimize the risk of exploitation.