ODBPEAK Q90E—Unisoc UIS7861 (uis7861_6h10)—Need help with bootloader unlock/BROM Mode
ODBPEAK Q90E—Unisoc UIS7861 (uis7861_6h10)—Need help with bootloader unlock/BROM Mode
25-06-2026, 12:51 PM
Hi everyone,
I have an ODBPEAK Q90E automotive rearview mirror dashcam device and I'm trying to unlock the bootloader and install Magisk to gain root access. I've done extensive research and found this thread which appears to be the closest match to my hardware. I'm hoping someone can help me find the BROM download mode trigger on the PCB, or share a compatible PAC firmware file.
Device Details:
Brand/Model: ODBPEAK Q90E (sold on AliExpress)
Chipset: UNISOC UIS7861 (uis7861_6h10) / Board Platform: UMS9230
Product Name: uis7861_6h10_Natv
RAM/Storage: 4GB RAM / 64GB ROM
Build Number: MZL_Q90E_030_MB_1126_CarCharger_user_2026020509
Build Fingerprint: UNISOC/uis7861_6h10_Natv/uis7861_6h10:14/SP1A.210812.016/05409:user/release-keys
Kernel: 5.4.147-android12-9-dirty #107 Thu Feb 5 09:31:26 CST 2026
Android: Reports 12 (SDK 31) but fingerprint confirms Android 14 underneath
Screen: 1920x440 automotive mirror display
Partitions: A/B slots, dynamic, erofs (read-only system partition)
What I've Already Tried:
fastboot flashing unlock — FAILED (remote: 'unknown cmd.')
fastboot oem unlock — FAILED (remote: 'unknown cmd.')
fastboot oem unlock-go — FAILED (remote: 'unknown cmd.')
fastboot flashing unlock_critical — FAILED (remote: 'Not implement.')
fastboot getvar all — Returns nothing (very locked down fastboot)
OEM Unlocking toggle in Developer Options — Toggle reverts back to off immediately after enabling
settings put global oem_unlock_enabled 1 — Sets to 1 but fastboot commands still fail
What works:
ADB over WiFi is permanently root (persist.adb.root=1)
USB ADB works normally
Device enters fastboot mode via adb reboot bootloader
Fastboot device is recognised after installing Android Bootloader Interface driver
There is a visible Reset pinhole button (marked R) on the back of the device
What I Need:
Location of the BROM download mode test point on the PCB — I've read that on similar uis7861_6h10 devices there is a hidden pad near the reversing camera jack that triggers BROM mode. Can anyone confirm where this is on the Q90E specifically, or on any uis7861_6h10 device?
Compatible PAC firmware file — Either the stock Q90E firmware or any compatible uis7861_6h10_Natv PAC that I can use to recover the device if needed, and to extract boot.img for Magisk patching.
Rooting method — I've seen the CVE-2022-38694 / ums9230_universal_unlock method used on similar devices. Has anyone used this on uis7861_6h10 hardware successfully?
Why I Need Root:
The device's WiFi hotspot is hardcoded to 5GHz by the vendor. I need to force it to 2.4GHz to connect a Simarine Pico marine battery monitor (2.4GHz only). The command cmd wifi start-softap PicoDashboard wpa2 pico54321 -b 2 works perfectly when run as root ADB but cannot be run from an app due to SELinux restrictions. Root via Magisk with a boot script would solve this permanently.
Additional Notes:
The vendor (ODBPEAK) has refused to provide firmware or assistance
The device has persist.adb.root=1 permanently set — root ADB over WiFi works without USB
The only physical button is a Reset pinhole on the back (marked R)
No volume buttons exist on this device — only a power/screenshot button on the bottom edge
Any help would be greatly appreciated. Happy to provide any additional device information needed.
Thank you!
26-06-2026, 07:57 PM
(26-06-2026, 02:15 PM)bkafi I managed to figure it out, DM me if you want the .docx file, copying and pasting it in here will look pretty average and be hard to follow.
Please share the doc, we can create the necessary guide in an understandable format
Learn MediaTek, Unisoc / Spreadtrum (SPD) and Qualcomm Software Repairs @ https://www.hovatek.com/training
Note!
We have a reply schedule for Forum Support. Please try Private Support if you can't wait.
26-06-2026, 10:45 PM
(26-06-2026, 07:57 PM)hovatek(26-06-2026, 02:15 PM)bkafi I managed to figure it out, DM me if you want the .docx file, copying and pasting it in here will look pretty average and be hard to follow.
Please share the doc, we can create the necessary guide in an understandable format
Heres the link to the .docx
https://docs.google.com/document/d/1fzjb...ue&sd=true
08-07-2026, 07:06 AM
(26-06-2026, 10:45 PM)bkafi https://docs.google.com/document/d/1fzjb...ue&sd=true
Thanks!
Learn MediaTek, Unisoc / Spreadtrum (SPD) and Qualcomm Software Repairs @ https://www.hovatek.com/training
Note!
We have a reply schedule for Forum Support. Please try Private Support if you can't wait.
Users browsing this thread:
1 Guest(s)
1 Guest(s)
Users browsing this thread:
1 Guest(s)
1 Guest(s)