CVE-2025-20656

CVSS 3.1 Score 6.8 of 10 (medium)

Details

Published Apr 7, 2025
Updated: Apr 9, 2025
CWE ID 787

Summary

CVE-2025-20656 is a vulnerability affecting DA software, which allows for a potential out-of-bounds write due to a missing bounds check. This issue could enable local privilege escalation for an attacker with physical access to the device, granting higher privileges without requiring additional execution privileges or user interaction. The vulnerability is identified as ALPS09625423 and MSV-3033, and a patch is available to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Android
  • OpenWRT
  • Yocto Linux

Affected Vendors

  • Google
  • OpenWrt
  • Linux Foundation

Advisories, Assessments, and Mitigations