CVE-2025-20658

The DA component in MediaTek's microprogramming software is vulnerable to a permission bypass caused by a logic error involving an out-of-bounds write in memory. An attacker with physical access to the device can exploit this flaw to achieve local escalation of privilege without requiring additio...