UNISOC Android Chipsets Engineer Mode Command Injection Vulnerability Allowing Privilege Escalation
Vulnerability
A command injection vulnerability has been identified in the engineer mode service of certain UNISOC Android chipsets. This issue arises from improper input validation, which could lead to local privilege escalation without requiring additional execution privileges. The vulnerability affects chipsets including SL8521E, SL8521ET, SL8541E, UIS8141E, UWS6137, UWS6137E, UWS6151E, and UWS6152, on software versions Mocor5, Android 8.1, and Android 9.
Impact
Exploitation of this vulnerability could result in unauthorized local privilege escalation.
Added: Aug 18, 2025, 1:19 AM
Updated: Aug 18, 2025, 1:19 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
3.3remediation
0.0relevance
0.3threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.