A cybersecurity researcher has demonstrated the vulnerabilities of multiple devices based on Unisoc’s Zhanrui processors that can be hacked simply by making a video call. The vulnerability allows an attacker to gain root access to the device, which means complete control.
Image source: Xiaomi.com
The root cause of the vulnerability was discovered in the firmware of several Unisoc chips in budget smartphones, including models from Xiaomi, Motorola and Realme. A successful attack could make changes to the Android operating system, but the proof-of-concept was conducted in a lab environment, not on a carrier network. Additionally, these devices were initially granted root access, so the attack may not have any real consequences.
The vulnerability was tested on smartphones Realme C33, Xiaomi Redmi A5 with security update 2026-01-01, and Motorola E13 with update 2025-02-01; all devices have also been updated to the July 2025 Android security update. A bug was found in modem firmware for Unisoc T612, T616, T606 and T7250 chips – all devices equipped with these processors are at risk.
An expert who goes by the pseudonym 0x50594d talked about this vulnerability. The issue is described as “an exploitable vulnerability related to improper isolation of shared resources on the system’s single chip. A critical vulnerability has been discovered in the Unisoc modem firmware that allows arbitrary code execution with core privileges in the modem context. Obtains execution of a pod on the modem An attacker could execute a pod in the first database of the database by duplicating the first data area of the memory block and display the first space in the memory. The data in the first space of the memory has not been deactivated in this data area and disable the entire memory. Disable this space and disable the entire memory “and store the entire memory in this data block area. No data has been written yet. Enable this data and disable the entire memory. Disable the entire memory. No data has been written in this data area. Enable and disable the entire memory” and store the entire memory in the first space of this data area.
If you find an error, select it with your mouse and press CTRL+ENTER.
