CVE-2025-20885

Summary

CVE-2025-20885 is a vulnerability affecting the softsim Technology Add-on (TA) before the SMR Jan-2025 Release 1. This issue involves an out-of-bounds write, which allows local privileged attackers to manipulate the memory of the affected system, potentially resulting in memory corruption. Successful exploitation could enable attackers to gain unauthorized control or access sensitive information, posing a significant risk to the security of the impacted infrastructure. It is recommended that users install the latest release of the softsim TA to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.