CVE-2025-20658

A logic error in the DA component of MediaTek's microprogramming software allows for an out-of-bounds write in memory. This vulnerability can lead to local escalation of privilege by an attacker who has physical access to the device; no additional execution privileges or user interaction are requ...

CVE-2025-20656

A vulnerability exists in the DA component of MediaTek microprogramming software and chipsets. The root cause is a missing bounds check , which allows for an out-of-bounds write in memory. An attacker with physical access to the device can exploit this issue to achieve local escalation of privile...