CVE-2025-20639

Summary

CVE-2025-20639 is a vulnerability affecting DA software that allows for local privilege escalation. This issue arises due to a missing bounds check leading to an out-of-bounds write. An attacker with physical access to the device can exploit this vulnerability by writing beyond the intended memory location, gaining elevated privileges without requiring additional execution privileges. User interaction is necessary for successful exploitation. The patch ID for addressing this issue is ALPS09291146, and it is also identified as MSV-2060.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.