Stack-based buffer overflow in MediaTek products - CVE-2025-20749

Vulnerability identifier: #VU117912

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-20749

CWE-ID: CWE-121

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local application to perform service disruption.

The vulnerability exists due to a missing bounds check within charger. A local application can perform service disruption.

MT6985
MT8796
MT8781
MT8196
MT8195
MT8188
MT8169
MT6991
MT6989
MT6789
MT6983
MT6899
MT6897
MT6886
MT6879
MT6878
MT6855
MT6835
TB373FU Lenovo Idea Tab Pro
TB311FU/TB311XU Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case
TB351FU Lenovo Tab Plus
TB350FU, TB350XU Lenovo Tab P11 Gen
TB350FU, TB350XU Lenovo Tab P11 2nd
TB305FUXU Lenovo Tab One/Lenovo Tab K9
TB330FUP, TB330XUP Lenovo Tab K11 Edition
TB330FUP, TB330XUP Lenovo Tab K11 Enhanced
TB570FU, TB570ZU Lenovo Tab Extreme
TB330FU/TB330XU Lenovo Tab B11/Lenovo Tab M11&K11
TB336FU/TB336ZU Lenovo Idea Tab/ Lenovo Tab K11 Gen 2
Lenovo Idea Tab Pro (TB373FU)
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)
Lenovo Tab Plus (TB351FU)
Lenovo Tab P11 2nd Gen (TB350XU / TB350FU)
Lenovo Tab One/Lenovo Tab K9 (TB305FUXU)
Lenovo Tab K9 (TB305FU/TB305XU)
Lenovo Tab K11 (TB330FU/TB330FUP/TB330XU/TB330XUP)
Lenovo Tab Extreme (TB570ZU/TB570FU)
Lenovo Tab M11 (TB330FU/TB330XU)
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)

Install security update from vendor's website.

• https://corp.mediatek.com/product-security-bulletin/November-2025

• Multiple vulnerabilities in MediaTek chipsets
• Multiple vulnerabilities in Lenovo Mediatek tablets