Stack-based buffer overflow in MediaTek products - CVE-2025-20714
Published: October 8, 2025
Vulnerability identifier: #VU116739
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-20714
CWE-ID: CWE-121
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to perform service disruption.
The vulnerability exists due to an incorrect bounds check within wlan. A local application can perform service disruption.
Affected software
MT6890
MT7615
MT7622
MT7663
MT7915
MT7916
MT7981
MT7986
Lenovo Idea Tab Pro (TB373FU)
TB373FU Lenovo Idea Tab Pro
MT7615
MT7622
MT7663
MT7915
MT7916
MT7981
MT7986
Lenovo Idea Tab Pro (TB373FU)
TB373FU Lenovo Idea Tab Pro
How to mitigate CVE-2025-20714
Install security update from vendor's website.