An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell, due to incomplete patching of CVE-2025-31710
History

Fri, 23 Jan 2026 20:15:00 +0000

Type Values Removed Values Added
Description An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell, due to incomplete patching of CVE-2025-31710
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-01-23T20:12:04.301Z

Reserved: 2025-12-08T00:00:00.000Z

Link: CVE-2025-67264

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-01-23T20:15:53.790

Modified: 2026-01-23T20:15:53.790

Link: CVE-2025-67264

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.