CVE-2025-20658

A logic error in the DA component of MediaTek's microprogramming software allows for an out-of-bounds write in memory. This vulnerability can lead to local escalation of privilege by an attacker who has physical access to the device; no additional execution privileges or user interaction are requ...

CVE-2025-20656

In CVE-2025-20656, the issue is in MediaTek DA within MediaTek firmware: a possible out-of-bounds write caused by a missing bounds check. This could enable local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges needed and no user in...