Android users beware if you own one of these budget smartphones, your device could be hacked with a simple video call

Date:
Thu, 20 Aug 2026 18:45:00 +0000

Description:
Security researchers uncover exploit on budget smartphones equipped with a Unisoc system-on-chip, initiated by starting a video call and able to grant root access to an attacker

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Unisoc system-on-chip (SoC) devices usually budget smartphones are vulnerable to a video call-based exploit Any smartphone can be used to place the call, with malicious code
sent in call setup messages Despite attempts, Unisoc did not respond to the disclosure Security researchers have demonstrated a weakness in several
Unisoc SoC-based devices that makes them vulnerable to an exploit sent during a video call. The exploit can deliver root access of the target device to the attacker, placing them in full control of the handset.

The vulnerability is in the firmware running on several Unisoc SoCs, each of which are used in budget smartphones, including models from Xiaomi, Motorola, and Realme. A successful attack can be used to alter an Android devices operating system , but the proof-of-concept was tested on a controlled
network rather than a carrier network. Additionally, the devices involved
were rooted. Consequently, the attack may not have real-world implications. Latest Videos From TechRadar Watch full video here: Which phones are
affected? While you may not know the name Unisoc, it is a big player in the chip business, sitting fourth behind MediaTek, Qualcomm, and Apple . Its
chips appear in IoT and smart home devices, as well as mobile technology, typically for well-known companies including Samsung and Motorola.

The researcher who uncovered the vulnerability is known only by the alias 0x50594d. You may like Experts say so-called 'Proactive SIM' cards can hijack smartphones, IoT devices and even EV chargers A dangerous Zoom screen-sharing bug could have let hackers hijack other devices on a call Android users targeted by new WindRelay malware which can clone contactless cards in just
13 minutes

They tested the exploit on three models:

Realme C33 Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

Xiaomi Redmi A5 (with security patch level 2026-01-01)

Motorola E13 (running security patch level 2025-02-01)

In addition, the phones were installed with the July 2025 Android security update. What to read next Samsung patches nearly 200 security issues on its phone hardware - here's what you need to know Hackers could use poisoned WhatsApp and Slack notifications to take over your Google Gemini and make it work on their behalf DeepSeek accidentally built a working ransomware strain

The advisory indicates that the flaw is in the modem firmware of four Unisoc SoCs. These are the T612, T616, T606, and T7250, which means any phone using those SoCs is potentially at risk.

However, it is important to note that the vulnerability was exploited in specific conditions. Improper Isolation The phones used in testing the
exploit were all rooted, a process that makes devices prone to malware. In
the majority of cases, these phones would not normally be rooted. In
addition, the exploit was tested across a closed VoLTE network, rather than across a carrier network.

Finally, as noted, the phones were running older security patches. So, the conditions for the exploit are very specific, but nevertheless concerning.

0x50594ds research was published on the SSD Secure Disclosure website, which summarized it as an exploitable Improper Isolation of Shared Resources on System-on-a-Chip. A critical vulnerability has been identified in the Unisoc modem firmware that allows arbitrary code execution with kernel privileges from the modem context.

An attacker who gains the ability to execute code on the modem can read from and write to the entire memory space by disabling protections on the first Memory Protection Unit (MPU) region (region ID 0).

It is should be noted that Unisoc has so far failed to respond to the
security disclosure.

Via Cybernews Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/android-users-beware-if-you-own-one-of- these-budget-smartphones-your-device-could-be-hacked-with-a-simple-video-call


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)