Out-of-bounds write in MediaTek products - CVE-2025-20696

Vulnerability identifier: #VU113627

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-20696

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error within the DA component. A local application can trigger an out-of-bounds write and execute arbitrary code on the target system.

MT6886
MT8676
MT8390
MT8370
MT8196
MT8188
MT6991
MT6990
MT6989
MT6985
MT6983
MT6899
MT6897
MT6895
MT6739
MT6879
MT6878
MT6855
MT6835
MT6833
MT6813
MT6789
MT6768
MT6765
MT6761
MT6893
MT6889
MT6885
MT6883
MT6877
MT6853
MT6781
TB570FU, TB570ZU Lenovo Tab Extreme
TB300XU, TB300FU Lenovo Tab M8 4th
TB300XU, TB300FU Lenovo Tab M8 Gen
TB301XU,TB301FU Lenovo Tab M8 4th
TB301XU,TB301FU Lenovo Tab M8 Gen
TB310XU, TB310FU Lenovo Tab M9
Lenovo Tab Extreme (TB570ZU/TB570FU)
Lenovo Tab M8 4th Gen (TB300FU/TB300XU)
Lenovo Tab M8 4th Gen 2024 (TB301FU/TB301XU)
Lenovo Tab M9 (TB310FU/TB310XU/TB310XC)
Google Android

Install updates from vendor's website.

Google Android - addressed in versions 13 2025-09-05, 14 2025-09-05, 15 2025-09-05, 16 2025-09-05

• https://corp.mediatek.com/product-security-bulletin/August-2025

• Multiple vulnerabilities in MediaTek chipsets
• Multiple vulnerabilities in Lenovo Mediatek tablets
• Multiple vulnerabilities in Google Android