CVE-2025-20635

Summary

CVE-2025-20635 is a vulnerability affecting V6 DA software. This issue involves a missing bounds check that could result in an out-of-bounds write. If exploited, this vulnerability could enable local privilege escalation, allowing an attacker to elevate their privileges without requiring additional execution privileges. Physical access to the device is necessary for exploitation, and user interaction is required for the attack to succeed. The patch ID for addressing this issue is ALPS09403752, and it is also identified as MSV-2434.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.