Out-of-bounds write in MediaTek products - CVE-2025-20697

Vulnerability identifier: #VU113628

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-20697

CWE-ID: CWE-787

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error within the Power HAL component. A local application can trigger an out-of-bounds write and execute arbitrary code on the target system.

MT6989
MT8893
MT8883
MT8873
MT8796
MT8792
MT8788E
MT8786
MT8775
MT8678
MT8391
MT8196
MT8186
MT6991
MT2718
MT6897
MT6879
MT6878
MT6855
MT6768
MT6765
MT6761
MT6893
MT6889
MT6885
MT6883
MT6877
MT6853
TB570FU, TB570ZU Lenovo Tab Extreme
TB300XU, TB300FU Lenovo Tab M8 4th
TB300XU, TB300FU Lenovo Tab M8 Gen
TB301XU,TB301FU Lenovo Tab M8 4th
TB301XU,TB301FU Lenovo Tab M8 Gen
TB310XU, TB310FU Lenovo Tab M9
Lenovo Tab Extreme (TB570ZU/TB570FU)
Lenovo Tab M8 4th Gen (TB300FU/TB300XU)
Lenovo Tab M8 4th Gen 2024 (TB301FU/TB301XU)
Lenovo Tab M9 (TB310FU/TB310XU/TB310XC)

Install updates from vendor's website.

• https://corp.mediatek.com/product-security-bulletin/August-2025

• Multiple vulnerabilities in MediaTek chipsets
• Multiple vulnerabilities in Lenovo Mediatek tablets