Affected Systems

Unisoc chipsets T606, T612, and T7250 used in Motorola E13, Realme C33, and Xiaomi Redmi A5. Devices with these chipsets sold across 140+ countries. Confirmed vulnerable on Motorola E13 (February 2025 patch) and Xiaomi Redmi A5 (January 2026 patch). No CVE assigned. Classified as CWE-1189 (improper isolation of shared resources on SoC).

Exploitation Status

Proof-of-concept demonstrated by SSD Secure Disclosure researcher 0x50594d. Requires attacker-controlled 4G network infrastructure, victim answering VoLTE video call, and chaining with March 2026 modem RCE vulnerability. No evidence of active exploitation in the wild. High technical barrier due to need for rogue base station and specialized equipment.

Business Impact

Full Android kernel access achievable through two-stage exploit chain. Unisoc has not responded to multiple disclosure attempts since March 2026 and no patch is available as of August 17, 2026. The flaw is architectural: shared physical memory between modem and application processor with no hardware-enforced boundary. Similar issue documented by Kaspersky in November 2025 on different Unisoc chip (UIS7862A). Attack requires sophisticated infrastructure (software-defined radio, open-source 4G core, specialized SIM cards) limiting real-world risk to targeted attacks. Devices remain vulnerable indefinitely without vendor cooperation. No CVSS score published.

Urgency

🟡 Within a week

Recommended Actions

  • Identify and inventory all devices using Unisoc T606, T612, and T7250 chipsets (Motorola E13, Realme C33, Xiaomi Redmi A5, and similar models) in your environment
  • Monitor Unisoc, Motorola, Realme, and Xiaomi security bulletins for firmware updates addressing CWE-1189 privilege escalation in modem firmware
  • Consider restricting VoLTE video call functionality on affected devices in high-security environments if device management platforms support granular telephony controls
  • Implement network-level monitoring for anomalous cellular behavior if deploying affected devices in sensitive contexts, though practical detection is limited
  • Plan device replacement or upgrade cycles to non-Unisoc hardware for critical use cases given vendor non-responsiveness and architectural nature of the flaw