CVE-2025-11193

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-03 · updated 2026-06-17
Weakness: CWE-256

Description

A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.

Affected products

Lenovo Idea Tab Pro (TB373FU): before 17.0.04.184 — fixed in 17.0.04.184
Lenovo Tab Extreme TB570ZU TB570FU: before 17.0.104 — fixed in 17.0.104
Lenovo Tab K11 Plus LTE TB352FU TB352XU: before 17.0.10.213 — fixed in 17.0.10.213
Lenovo Tab K11 Plus WIFI TB352FU: before 17.0.10.213 — fixed in 17.0.10.213
Lenovo Tab K11 TB330FU TB330FUP TB330XU TB330XUP: before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 — fixed in TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011
Lenovo Tab K9 (TB305FU): before 17.0.10.069 — fixed in 17.0.10.069
Lenovo Tab K9 (TB305XU): before 17.0.10.065 — fixed in 17.0.10.065
Lenovo Tab M10 5G (TB360ZU): before 16.0.783 — fixed in 16.0.783
Lenovo Tab M11 TB330FU TB330XU: before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 — fixed in TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011
Lenovo Tab M8 4th Gen 2024 TB301FU TB301XU: before TB300FU_USR_S101112_250919_MP1V1111_ROW; before TB300XU_USR_S101103_250919_MP1V1111_ROW — fixed in TB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROW
Lenovo Tab M8 4th Gen TB300FU TB300XU: before TB300FU_USR_S101112_250919_MP1V1111_ROW; before TB300XU_USR_S101103_250919_MP1V1111_ROW — fixed in TB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROW
Lenovo Tab M9 TB310FU TB310XU: before TB310FU_USR_S000912_2510022135_mp1V969_ROW; before TB310XU_USR_S000913_2510021921_mp1V969_ROW — fixed in TB310FU_USR_S000912_2510022135_mp1V969_ROW, TB310XU_USR_S000913_2510021921_mp1V969_ROW
Lenovo Tab One TB305FUXU: before 17.0.10.107 — fixed in 17.0.10.107
Lenovo Tab P11 2nd Gen TB350XU TB350FU: before TB350XU_USER_S230920_2508120308_MP_ROW; before TB350FU_USER_S230917_2508090248_MP_ROW — fixed in TB350FU_USER_S230917_2508090248_MP_ROW, TB350XU_USER_S230920_2508120308_MP_ROW
Lenovo Tab P12 TB370FU TB372FU: before TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_250817; before TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822 — fixed in TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_250817, TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822
Lenovo Tab Plus TB520FU: before 17.0.12.203 — fixed in 17.0.12.203
Lenovo Tab WIFI: before 17.0.30.303 — fixed in 17.0.30.303
Lenovo Tab WiFi 5G: before 17.0.10.457 — fixed in 17.0.10.457
Lenovo Yoga Tab Plus (TB520FU): before 17.5.10.035 — fixed in 17.5.10.035

How to fix

Upgrade to a fixed version: Lenovo Idea Tab Pro (TB373FU) 17.0.04.184; Lenovo Tab Extreme TB570ZU TB570FU 17.0.104; Lenovo Tab K11 Plus LTE TB352FU TB352XU 17.0.10.213; Lenovo Tab K11 Plus WIFI TB352FU 17.0.10.213; Lenovo Tab K11 TB330FU TB330FUP TB330XU TB330XUP TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011; Lenovo Tab K9 (TB305FU) 17.0.10.069; Lenovo Tab K9 (TB305XU) 17.0.10.065; Lenovo Tab M10 5G (TB360ZU) 16.0.783; Lenovo Tab M11 TB330FU TB330XU TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011; Lenovo Tab M8 4th Gen 2024 TB301FU TB301XU TB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROW; Lenovo Tab M8 4th Gen TB300FU TB300XU TB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROW; Lenovo Tab M9 TB310FU TB310XU TB310FU_USR_S000912_2510022135_mp1V969_ROW, TB310XU_USR_S000913_2510021921_mp1V969_ROW. Check the vendor advisory for mitigations.

References

https://support.lenovo.com/us/en/product_security/LEN-202383

Get alerted when CVE-2025-11193 or the next vulnerability affects your stack