PT-2026-4525 · Doogee · Doogee Note59+2

Published 2026-01-23 · Updated 2026-02-11 · CVE-2025-67264

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Doogee Note59 Doogee Note59 Pro Doogee Note59 Pro+ (affected versions not specified)

Description A flaw exists within the com.sprd.engineermode component that could allow a local attacker to execute arbitrary code and escalate privileges. This is due to an OS command injection issue present in the EngineerMode ADB shell. The issue relates to incomplete patching of a previous problem.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-67264

Affected Products

Doogee Note59

Doogee Note59 Pro

Doogee Note59 Pro+

References · 6

• 🔥 https://github.com/Skorpion96/unisoc-su/blob/main/CVE-2025-67264.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-67264 · Security Note
• https://twitter.com/CVEnew/status/2015362497562480741 · Twitter Post
• https://t.me/cveNotify/151744 · Telegram Post
• https://t.me/CVEtracker/42880 · Telegram Post
• http://doogee.com · Note