PT-2025-31793 · Da · Da

Published 2025-08-04 · Updated 2025-08-04 · CVE-2025-20696

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DA (affected versions not specified)

Description DA may be susceptible to an out-of-bounds write due to a missing bounds check. Successful exploitation of this issue could lead to local privilege escalation. Physical access to the device is required for exploitation, and user interaction is needed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ASB-A-421781778

CVE-2025-20696

M-ALPS09915215

Affected Products

Da

References · 7

• https://osv.dev/vulnerability/CVE-2025-20696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20696 · Security Note
• https://corp.mediatek.com/product-security-bulletin/August-2025 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1952213143200858394 · Twitter Post
• https://t.me/CVEtracker/29069 · Telegram Post
• https://twitter.com/CVEnew/status/1952210613079281738 · Twitter Post
• https://t.me/cveNotify/130724 · Telegram Post