CVE-2025-20638

Summary

CVE-2025-20638 is a vulnerability affecting DA software where uninitialized heap data may be read. This issue could result in local information disclosure if an attacker gains physical access to the device, requiring no additional execution privileges or user interaction for exploitation. A patch with ID ALPS09291449 is available to mitigate this vulnerability, identified as MSV-2066.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.