PT-2025-33624 · Google+2 · Android 8.1+3

Published 2025-08-18 · Updated 2025-08-23 · CVE-2025-31713

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Unisoc chipsets (SL8521E, SL8541E) Android 8.1 on Mocor5

Description: The engineer mode service is susceptible to a command injection due to insufficient input validation. This issue may allow for local privilege escalation without requiring additional execution privileges.

Recommendations: Restrict access to the engineer mode service. Monitor devices for suspicious activity.

Fix

Related Identifiers

CVE-2025-31713

Affected Products

Android 8.1

Mocor5

Unisoc Sl8521E

Unisoc Sl8541E

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-31713 · Security Note
• https://twitter.com/cracbot/status/1958846655291417039 · Twitter Post
• https://t.me/cveNotify/132605 · Telegram Post
• https://unisoc.com/en_us/secy/announcementDetail/1944933773300793346 · Note
• https://twitter.com/offseq/status/1957276391705121110 · Twitter Post
• https://twitter.com/CVEnew/status/1957278985693352157 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1957285603239760128 · Twitter Post
• https://twitter.com/cracbot/status/1959209036328644696 · Twitter Post
• https://t.me/CVEtracker/30248 · Telegram Post
• https://twitter.com/cracbot/status/1958484288036393035 · Twitter Post
• https://twitter.com/BaseFortify/status/1957367577866289419 · Twitter Post