A use‑after‑free bug in the AIDL component of MediaTek chipsets can corrupt memory, allowing a process that already holds System privileges to gain additional privileges. The flaw does not require any user interaction and can be triggered by malicious actor input when the vulnerable memory region is freed and reused.

The vulnerability affects MediaTek, Inc. chipsets. No specific firmware or software version range is listed in the advisory, so all deployments using the affected AIDL component are potentially impacted.

The EPSS score is not available and the flaw is not in the CISA KEV catalog, but the local privilege escalation potential and a CVSS score of 6.7 suggest a moderate‑to‑high risk if an attacker has any local access. The flaw can be exploited by re‑allocating the freed buffer in a way that writes controlled data, a classic use‑after‑free condition. Users with normal privileges cannot trigger the issue unless they have already achieved System privilege through other means.