CVE-2025-31710: Command Injection
Published Jun 3, 2025
·Updated
In engineermode service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.
Affected Software
15 affected components
All of the following
Any of the following
Google Android=13.0
Google Android=14.0
Google Android=15.0
Any of the following
UNISOC S8000
UNISOC Sc9863a
UNISOC T606
UNISOC T612
UNISOC T616
UNISOC T750
UNISOC T760
UNISOC T765
UNISOC T770
UNISOC T820
UNISOC T8300
UNISOC T9300
Event History
Jun 3, 2025
CVE Published
via MITRE·05:50 AM
Data Sourced
via MITRE·05:50 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-31710?
CVE-2025-31710 has a high severity due to the potential for local escalation of privilege.
2
How do I fix CVE-2025-31710?
To fix CVE-2025-31710, ensure that input validation is properly implemented in the engineermode service.
3
What types of devices are affected by CVE-2025-31710?
CVE-2025-31710 affects Android devices specifically version 13.0, 14.0, and 15.0.
4
Can CVE-2025-31710 be exploited remotely?
CVE-2025-31710 cannot be exploited remotely as it requires local access to the affected system.
5
Who is the vendor for the affected software in CVE-2025-31710?
The vendor for the affected software in CVE-2025-31710 is Google for Android.