CVE-2025-20743: Use After Free
Published Nov 4, 2025
·Updated
In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10136671; Issue ID: MSV-4651.
Affected Software
56 affected components
All of the following
Any of the following
Google Android=14.0
Google Android=15.0
Google Android=16.0
Any of the following
MediaTek Mt2718
MediaTek Mt6761
MediaTek Mt6765
MediaTek Mt6768
MediaTek Mt6781
MediaTek Mt6853
MediaTek Mt6877
MediaTek Mt6886
MediaTek Mt6893
MediaTek Mt6897
MediaTek Mt6899
MediaTek Mt6983
MediaTek Mt6989
MediaTek Mt6991
MediaTek Mt8113
MediaTek Mt8163
MediaTek Mt8168
MediaTek Mt8169
MediaTek Mt8183
MediaTek Mt8186
MediaTek Mt8188
MediaTek Mt8195
MediaTek Mt8196
MediaTek Mt8321
MediaTek Mt8365
MediaTek Mt8385
MediaTek Mt8390
MediaTek Mt8391
MediaTek Mt8512
MediaTek Mt8516
MediaTek Mt8519
MediaTek Mt8676
MediaTek Mt8678
MediaTek Mt8695
MediaTek Mt8696
MediaTek Mt8698
MediaTek Mt8755
MediaTek Mt8766
MediaTek Mt8768
MediaTek Mt8771
MediaTek Mt8775
MediaTek Mt8781
MediaTek Mt8786
MediaTek Mt8788e
MediaTek Mt8791t
MediaTek Mt8792
MediaTek Mt8793
MediaTek Mt8796
MediaTek Mt8797
MediaTek Mt8798
MediaTek Mt8873
MediaTek Mt8883
MediaTek Mt8893
Event History
Nov 4, 2025
CVE Published
via MITRE·06:19 AM
Data Sourced
via MITRE·06:19 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20743?
The severity of CVE-2025-20743 is critical due to the potential for local escalation of privilege.
2
How do I fix CVE-2025-20743?
To fix CVE-2025-20743, apply the patch identified by ALPS10136671 as soon as possible.
3
What impact does CVE-2025-20743 have on affected systems?
CVE-2025-20743 allows a malicious actor with system privilege to escalate privileges further without user interaction.
4
Which software versions are affected by CVE-2025-20743?
CVE-2025-20743 affects Google Android versions 14.0, 15.0, and 16.0.
5
Is user interaction required to exploit CVE-2025-20743?
No, user interaction is not required to exploit CVE-2025-20743.