The vulnerability in ZTE Red Magic 11 Pro (NX809J) arises from inadequate validation of applications accessing a service interface, allowing non-privileged apps to invoke sensitive operations. An attacker can exploit this flaw to write files to specific partitions and set writable system properties, potentially altering core system behavior and facilitating further malicious activity. This represents a breach of the device’s integrity and offers a pathway to elevate privileges or modify system configuration.

ZTE Red Magic 11 Pro (NX809J) is the only device identified as affected in the current data set. No additional model or firmware version information is provided, so the impact is limited to this handset model.

The vulnerability carries a CVSS score of 5 out of 10, indicating moderate severity. The EPSS score of < 1% reflects a very low but non-zero probability of exploitation, suggesting that widespread exploitation is currently undocumented. The attack vector appears to be local: a malicious application installed on the device can trigger the vulnerable service. While the risk is moderate, the potential for privilege escalation and system compromise is real if an attacker can install a rogue app.