MediaTek Chipsets Privilege Escalation Vulnerability in clkdbg Component

Vulnerability

A use-after-free vulnerability has been identified in the clkdbg component of certain MediaTek chipsets, including MT2718, MT6761, MT6765, MT6768, MT6781, MT6853, MT6877, MT6886, MT6893, MT6897, MT6899, MT6983, MT6989, MT6991, MT8113, MT8163, MT8168, MT8169, MT8183, MT8186, MT8188, MT8195, MT8196, MT8321, MT8365, MT8385, MT8390, MT8391, MT8512, MT8516, MT8519, MT8676, MT8678, MT8695, MT8696, MT8698, MT8755, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788E, MT8791T, MT8792, MT8793, MT8796, MT8797, MT8798, MT8873, MT8883, MT8893. This vulnerability could lead to local privilege escalation for an actor who has already gained system privileges, without requiring user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user with system rights to gain elevated privileges.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device OEMs. For further information, OEMs can contact their MediaTek representative.

Added: Nov 4, 2025, 7:27 AM
Updated: Nov 4, 2025, 7:27 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
2.8
remediation
0.0
relevance
0.9
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.