Home / Technology / Unisoc Chip Flaw: Video Call Exploit Grants Full Control
Unisoc Chip Flaw: Video Call Exploit Grants Full Control
21 Aug
Summary
- A video call exploit can give attackers root access to Unisoc chip devices.
- The vulnerability affects budget smartphones from brands like Xiaomi, Motorola, and Realme.
- Unisoc has not responded to the security disclosure of this critical flaw.
Security researchers have uncovered a critical vulnerability in several Unisoc system-on-chip (SoC) devices, commonly found in budget smartphones. This flaw, present in the modem firmware of Unisoc T612, T616, T606, and T7250 SoCs, can be exploited through video calls.
Attackers can send malicious code within call setup messages to gain root access, effectively taking complete control of the affected handset. The exploit was demonstrated on rooted devices with specific older security patches (July 2025 Android security update) within a controlled network environment. Brands like Xiaomi, Motorola, and Realme utilize these Unisoc chips.
Despite the disclosure, Unisoc has not yet responded to the findings. The vulnerability, categorized as an Improper Isolation of Shared Resources on System-on-a-Chip, allows arbitrary code execution with kernel privileges. This enables attackers to read and write to the device's entire memory space by disabling protections.
