CVE-2025-20642

Summary

CVE-2025-20642 is a vulnerability affecting DA software that allows for local privilege escalation. This is due to a missing bounds check leading to an out-of-bounds write. An attacker who has physical access to the device can exploit this issue, requiring no additional execution privileges or user interaction beyond the initial access. The affected software can be patched using the provided ID: ALPS09291146.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.