CVE-2025-20658

The DA component in MediaTek's microprogramming software is vulnerable to a permission bypass caused by a logic error involving an out-of-bounds write in memory. An attacker with physical access to the device can exploit this flaw to achieve local escalation of privilege without requiring additio...

CVE-2025-20656

A vulnerability exists in the DA component of MediaTek microprogramming software due to a missing bounds check , which leads to an out-of-bounds write in memory. An attacker with physical access to the device can exploit this flaw to achieve local privilege escalation and potentially expose prote...