Skip to content
OpenAdvisories
Medium · 4.2 CVE-2025-20743 EUVD-2025-37571GHSA-4xwg-fxhm-6r9c

In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicio…

Published Nov 4, 2025 · Updated Nov 3, 2026 · Assigned by MediaTek

Description

In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10136671; Issue ID: MSV-4651.

Affected products

VendorProductAffectedFixed
MediaTek MT2718, MT6761, MT6765, MT6768, MT6781, MT6853, MT6877, MT6886, MT6893, MT6897, MT6899, MT6983, MT6989, MT6991, MT8113, MT8163, MT8168, MT8169, MT8183, MT8186, MT8188, MT8195, MT8196, MT8321 Android 14.0, 15.0, 16.0 —

References