MediaTek Preloader Privilege Escalation Vulnerability

Vulnerability

A vulnerability in the preloader component of certain MediaTek chipsets allows for local privilege escalation. This issue arises from an insecure default value, which could be exploited by an actor who has already gained system privileges. The vulnerability does not require user interaction to be exploited.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user with system privileges to gain elevated rights or access.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.

Added: Nov 4, 2025, 7:40 AM
Updated: Nov 4, 2025, 7:40 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
2.8
remediation
0.0
relevance
0.9
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.