Description Summary:
The Unisoc UDX710 modem contains an improper input validation vulnerability that may allow an unauthenticated remote attacker to cause a denial of service condition.

Executive Summary:
A high severity improper input validation flaw in the Unisoc UDX710 modem could result in significant service disruption.

Vulnerability Details

CVE-ID: CVE-2026-21555

Affected Software: Unisoc UDX710

Affected Versions: Yocto

Vulnerability: This vulnerability is an improper input validation flaw within the modem firmware. It can be triggered by an unauthenticated remote attacker with no user interaction required.

Business Impact

Successful exploitation leads to a denial of service, which can cause critical system instability or complete loss of connectivity for the affected hardware. With a CVSS score of 7.5, this vulnerability represents a significant risk to operational continuity and system reliability.

Remediation Plan

Immediate Action: Monitor official Unisoc product security bulletins and apply firmware updates as soon as they are made available by the vendor.

Proactive Monitoring: Monitor device logs for unexpected reboots or modem connection drops that may indicate exploitation attempts.

Compensating Controls: Ensure that network traffic to the affected hardware is restricted to trusted segments to reduce the surface area for remote attacks.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential for remote, unauthenticated disruption of modem functions.

Analyst Recommendation

Given the high CVSS score and the critical role of modem firmware in device connectivity, administrators should prioritize this issue. Implement vendor patches immediately upon release to mitigate the risk of denial of service attacks.

Description Summary:
An improper input validation vulnerability within the Unisoc UDX710 modem firmware could lead to denial of service conditions.

Executive Summary:
A high-severity input validation vulnerability in the Unisoc UDX710 modem firmware poses a significant risk to device availability.

Vulnerability Details

CVE-ID: CVE-2026-21554

Affected Software: Unisoc UDX710

Affected Versions: Yocto

Vulnerability: This flaw involves improper input validation in the modem firmware. It is classified as remotely exploitable by an unauthenticated attacker, potentially resulting in service disruption.

Business Impact

The CVSS score of 7.5 underscores the potential for service degradation. For systems utilizing the UDX710 modem, such as industrial or IoT devices running Yocto, successful exploitation could render the hardware unresponsive, leading to costly downtime and maintenance requirements.

Remediation Plan

Immediate Action: Consult the Unisoc security bulletin for remediation guidance and prepare for firmware deployment once a patch is provided.

Proactive Monitoring: Implement monitoring to detect unexpected modem resets or communication failures in devices utilizing the UDX710 chipset.

Compensating Controls: Where feasible, utilize network segmentation or firewalls to limit the traffic reaching the modem interface, reducing the attack surface.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherent to the firmware logic, requiring a vendor-supplied update to resolve.

Analyst Recommendation

Organizations relying on the UDX710 modem should monitor vendor advisories closely. Given the high severity, ensure that a robust patch management process is in place to deploy the required firmware updates as soon as they become available.

Description Summary:
A vulnerability in the Unisoc modem firmware allows for improper input validation, which may lead to system instability or denial of service.

Executive Summary:
A high-severity input validation vulnerability in Unisoc modem firmware affects devices running Android 13 through 16, creating a risk of service disruption.

Vulnerability Details

CVE-ID: CVE-2026-21553

Affected Software: Unisoc T8100/T9100/T8200/T8300

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: The modem component fails to properly validate input, which could be leveraged by an unauthenticated attacker. This represents a high-severity flaw impacting the availability of the affected modem hardware.

Business Impact

With a CVSS score of 7.5, this vulnerability presents a serious risk to operational continuity. Unauthorized parties could trigger a denial of service on the modem, causing loss of network access and potentially impacting critical business functions dependent on cellular connectivity.

Remediation Plan

Immediate Action: Periodically check the Unisoc product security bulletin for the release of firmware patches and deploy them through the standard device management lifecycle.

Proactive Monitoring: Review system logs for signs of abnormal modem behavior or repeated service failures.

Compensating Controls: Restrict unnecessary network exposure where possible, though the nature of modem firmware often limits the effectiveness of traditional network-level controls.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The risk remains theoretical until a patch is issued or exploitation methods are publicized.

Analyst Recommendation

Security teams should treat this as a high-priority item for mobile device fleets. Maintain communication with the device manufacturer to ensure that security updates provided by Unisoc are integrated into the monthly security patch cycle.

Description Summary:
An improper input validation vulnerability exists in the Unisoc modem firmware, potentially allowing for denial of service conditions.

Executive Summary:
A high-severity input validation flaw in the Unisoc modem firmware on various Android versions poses a significant risk of service disruption.

Vulnerability Details

CVE-ID: CVE-2026-21552

Affected Software: Unisoc T8100/T9100/T8200/T8300

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: This vulnerability involves improper input validation within the modem component. Based on the CVSS vector (AV:N/AC:L/PR:N/UI:N), the flaw is remotely exploitable by an unauthenticated attacker.

Business Impact

The vulnerability carries a CVSS score of 7.5, indicating a high risk to availability. Successful exploitation could lead to modem crashes or complete loss of cellular connectivity, resulting in significant downtime for mobile devices or critical communication infrastructure.

Remediation Plan

Immediate Action: Monitor the official Unisoc support portal for security updates and apply them to affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected modem restarts or connectivity drops that may indicate exploitation attempts.

Compensating Controls: Ensure devices are running the latest security patches provided by the device manufacturer, as these often bundle firmware updates from chipset vendors.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's remote nature makes it a priority for patching once the vendor releases a fix.

Analyst Recommendation

Given the potential for remote denial of service, administrators must prioritize this vulnerability. Organizations should track the release of updated firmware through the Unisoc support channel and coordinate an accelerated deployment schedule once the patch is confirmed.

Description Summary:
A vulnerability in the Unisoc modem firmware allows for improper input validation, potentially leading to a denial of service condition.

Executive Summary:
A high-severity input validation flaw in Unisoc modem firmware, affecting multiple Android versions, presents a significant risk of remote denial of service.

Vulnerability Details

CVE-ID: CVE-2026-21551

Affected Software: Unisoc T8100/T9100/T8200/T8300

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: This vulnerability is caused by improper input validation within the modem component. As indicated by the CVSS vector (AV:N/PR:N/UI:N), the flaw is remotely exploitable by an unauthenticated attacker.

Business Impact

The exploitation of this vulnerability results in a denial of service condition, which can lead to critical system instability or total loss of modem functionality. Given the CVSS score of 7.5, this high-severity issue impacts mobile device availability and reliability, potentially hindering business-critical communications.

Remediation Plan

Immediate Action: Monitor the official Unisoc product security bulletin for the release of firmware updates and apply them to affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected modem resets or connectivity drops that could indicate exploitation attempts.

Compensating Controls: While specific network-level controls are difficult for modem-level flaws, ensure that devices are managed through a Mobile Device Management (MDM) solution to enforce security policies and expedite patch deployment.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's remote nature makes it highly accessible to attackers.

Analyst Recommendation

Due to the remote exploitability and the critical role of the modem in mobile device operations, this vulnerability poses a significant availability risk. Organizations should prioritize patching as soon as the vendor provides the necessary firmware updates to ensure device stability and continuity of service.

Description Summary:
A vulnerability in the Unisoc modem firmware allows for improper input validation, potentially leading to a denial of service condition.

Executive Summary:
A high-severity input validation flaw in Unisoc modem firmware, affecting multiple Android versions, presents a significant risk of remote denial of service.

Vulnerability Details

CVE-ID: CVE-2026-21550

Affected Software: Unisoc T8100/T9100/T8200/T8300

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: This vulnerability is caused by improper input validation within the modem component. As indicated by the CVSS vector (AV:N/PR:N/UI:N), the flaw is remotely exploitable by an unauthenticated attacker.

Business Impact

The exploitation of this vulnerability results in a denial of service condition, which can lead to critical system instability or total loss of modem functionality. Given the CVSS score of 7.5, this high-severity issue impacts mobile device availability and reliability, potentially hindering business-critical communications.

Remediation Plan

Immediate Action: Monitor the official Unisoc product security bulletin for the release of firmware updates and apply them to affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected modem resets or connectivity drops that could indicate exploitation attempts.

Compensating Controls: While specific network-level controls are difficult for modem-level flaws, ensure that devices are managed through a Mobile Device Management (MDM) solution to enforce security policies and expedite patch deployment.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's remote nature makes it highly accessible to attackers.

Analyst Recommendation

Due to the remote exploitability and the critical role of the modem in mobile device operations, this vulnerability poses a significant availability risk. Organizations should prioritize patching as soon as the vendor provides the necessary firmware updates to ensure device stability and continuity of service.

Description Summary:
A vulnerability in the Unisoc modem firmware allows for improper input validation, potentially leading to a denial of service condition.

Executive Summary:
A high-severity input validation flaw in Unisoc modem firmware, affecting multiple Android versions, presents a significant risk of remote denial of service.

Vulnerability Details

CVE-ID: CVE-2026-21549

Affected Software: Unisoc T8100/T9100/T8200/T8300

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: This vulnerability is caused by improper input validation within the modem component. As indicated by the CVSS vector (AV:N/PR:N/UI:N), the flaw is remotely exploitable by an unauthenticated attacker.

Business Impact

The exploitation of this vulnerability results in a denial of service condition, which can lead to critical system instability or total loss of modem functionality. Given the CVSS score of 7.5, this high-severity issue impacts mobile device availability and reliability, potentially hindering business-critical communications.

Remediation Plan

Immediate Action: Monitor the official Unisoc product security bulletin for the release of firmware updates and apply them to affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected modem resets or connectivity drops that could indicate exploitation attempts.

Compensating Controls: While specific network-level controls are difficult for modem-level flaws, ensure that devices are managed through a Mobile Device Management (MDM) solution to enforce security policies and expedite patch deployment.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's remote nature makes it highly accessible to attackers.

Analyst Recommendation

Due to the remote exploitability and the critical role of the modem in mobile device operations, this vulnerability poses a significant availability risk. Organizations should prioritize patching as soon as the vendor provides the necessary firmware updates to ensure device stability and continuity of service.

Description Summary:
A vulnerability in the Unisoc NR modem firmware allows for potential denial of service via improper input validation of network traffic.

Executive Summary:
A critical input validation vulnerability in Unisoc modem firmware could allow unauthenticated attackers to cause a denial of service on mobile devices.

Vulnerability Details

CVE-ID: CVE-2026-21548

Affected Software: Unisoc T8100, T9100, T8200, T8300

Affected Versions: Android 13, 14, 15, and 16

Vulnerability: This vulnerability, classified as CWE-20, involves improper input validation within the NR modem component. It allows an unauthenticated, remote attacker (AV:N, PR:N) to send specially crafted inputs that trigger a denial of service condition.

Business Impact

The ability for a remote attacker to crash the modem component of a mobile device poses a significant risk to availability and connectivity. With a CVSS score of 7.5, the potential for widespread service disruption on affected mobile handsets makes this a high-urgency issue for device manufacturers and telecommunications providers.

Remediation Plan

Immediate Action: Check with the device manufacturer or service provider for firmware updates that include the necessary fixes for the affected Unisoc modem chipsets.

Proactive Monitoring: Monitor device performance and connectivity stability for signs of unexpected modem resets or network service drops.

Compensating Controls: Since this is a hardware-layer vulnerability, there are limited software-based compensating controls; ensuring the device operating system is fully patched is the best defense.

Exploitation Status

Public Exploit Available: No confirmed public exploit exists in the available data.

Analyst Notes: As of August 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential for remote, unauthenticated impact on device availability.

Analyst Recommendation

Because this vulnerability affects core modem firmware, it is essential to monitor manufacturer security bulletins for firmware releases. Users should install updates as soon as they are made available by their device vendor to restore stable and secure modem operation.

Description Summary:
A vulnerability in the NR modem component allows for improper input validation, which may lead to system instability or unauthorized behavior.

Executive Summary:
An improper input validation vulnerability in the NR modem component presents a high-risk security threat that demands immediate vendor-provided remediation.

Vulnerability Details

CVE-ID: CVE-2025-71256

Affected Software: NR Modem

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The flaw consists of improper input validation within the NR modem firmware. This type of vulnerability typically allows an attacker to exploit the interface by sending specifically crafted input to trigger memory corruption or logic errors.

Business Impact

With a CVSS score of 7.5, this vulnerability represents a significant risk to the integrity of communication infrastructure. Successful exploitation could lead to unauthorized access or persistent denial-of-service, negatively impacting critical business communications.

Remediation Plan

Immediate Action: Update the firmware of all NR modem devices to the latest version provided by the manufacturer.

Proactive Monitoring: Monitor device logs for signs of unexpected reboots or service failures that may indicate an attempt to exploit the input validation flaw.

Compensating Controls: Implement strict network access controls to limit communication with the modem interface to trusted endpoints only.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Firmware security is critical for hardware-level components. Organizations should prioritize updating all NR modem devices to ensure they are protected against this input validation vulnerability.

Description Summary:
A vulnerability in the Modem IMS component allows for improper input validation, which may lead to system instability or unauthorized behavior.

Executive Summary:
A high-severity input validation vulnerability in the Modem IMS component requires immediate attention to prevent potential system compromise.

Vulnerability Details

CVE-ID: CVE-2025-71255

Affected Software: Modem IMS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This is an improper input validation vulnerability within the Modem IMS. Such flaws often allow attackers to supply crafted data that the system fails to sanitize, potentially resulting in memory corruption or arbitrary command execution.

Business Impact

Assigned a CVSS score of 7.5, this issue poses a substantial risk to service availability and data integrity. Organizations should consider the potential for operational disruption if systems are targeted via this vulnerability.

Remediation Plan

Immediate Action: Monitor vendor support channels for the release of security patches and apply them immediately to all affected hardware.

Proactive Monitoring: Inspect traffic patterns entering the modem interface for malformed packets or unusual data sequences.

Compensating Controls: Where applicable, apply rate-limiting to input interfaces to mitigate the impact of potential automated exploitation attempts.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Prompt remediation is necessary to mitigate the risk posed by this vulnerability. Security teams should ensure that all firmware updates are validated and deployed across the enterprise environment without delay.

Description Summary:
A vulnerability in the Modem IMS component allows for improper input validation, which may lead to system instability or unauthorized behavior.

Executive Summary:
An improper input validation vulnerability in the Modem IMS component creates a high-risk security exposure that requires immediate remediation.

Vulnerability Details

CVE-ID: CVE-2025-71254

Affected Software: Modem IMS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability involves a flaw in how the Modem IMS component handles input. Improper validation can lead to buffer overflows or logic errors, potentially allowing an attacker to manipulate system processes.

Business Impact

The CVSS score of 7.5 indicates a significant risk of compromise. Successful exploitation could lead to denial-of-service conditions or unauthorized access, impacting the reliability and integrity of the affected communication systems.

Remediation Plan

Immediate Action: Apply all relevant security updates provided by the hardware or software vendor as soon as they become available.

Proactive Monitoring: Review system diagnostic logs for signs of input-related errors or unexpected modem resets.

Compensating Controls: Use network segmentation to isolate modem communication channels from untrusted networks to reduce the surface area for potential attacks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations should treat this as a high-priority update. Ensure that all hardware using the affected IMS component is registered for security notifications to facilitate the rapid application of patches once released.

Description Summary:
A vulnerability in the Modem IMS component allows for improper input validation, which may lead to system instability or unauthorized behavior.

Executive Summary:
Improper input validation within the Modem IMS component presents a high risk of potential exploitation, necessitating immediate vendor-provided updates.

Vulnerability Details

CVE-ID: CVE-2025-71253

Affected Software: Modem IMS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability stems from improper input validation within the Modem IMS framework. It is currently unclear if this requires authentication; however, input validation flaws in low-level communication software often allow for unauthenticated remote or local triggering.

Business Impact

With a CVSS score of 7.5, this high-severity vulnerability could lead to service disruption or potential code execution depending on the specific input vector. Organizations utilizing affected modem infrastructure face potential operational downtime if this vulnerability is successfully leveraged by an attacker.

Remediation Plan

Immediate Action: Identify systems utilizing the affected Modem IMS software and apply the latest security patches released by the vendor.

Proactive Monitoring: Monitor system logs for unexpected crashes or error messages related to modem communication processes.

Compensating Controls: Restrict network access to management interfaces and ensure that input to the modem interface is strictly sanitized by upstream firewalls or proxy services.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the critical role of modem communication in network operations, organizations should prioritize vendor communication to verify patch availability. Maintaining updated firmware is essential to preventing potential exploitation of this input validation flaw.

Description Summary:
A vulnerability in the Modem IMS component allows for potential exploitation due to improper input validation.

Executive Summary:
An input validation flaw in the Modem IMS stack could lead to system instability or service degradation in affected mobile or network devices.

Vulnerability Details

CVE-ID: CVE-2025-71252

Affected Software: Modem IMS

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability involves the failure of the Modem IMS component to properly validate incoming data. An unauthenticated attacker capable of communicating with the modem could trigger unexpected behavior, potentially leading to a device crash or loss of signal.

Business Impact

With a CVSS score of 7.5, this vulnerability is a high-priority concern for mobile and embedded device security. Exploitation could lead to loss of device functionality, disrupting user access to mobile networks and critical communication services.

Remediation Plan

Immediate Action: Apply the latest firmware or software updates provided by the device manufacturer or service provider.

Proactive Monitoring: Track device performance and connectivity metrics for patterns that suggest service interruptions or repeated modem resets.

Compensating Controls: Restrict unnecessary network exposure of device management interfaces to prevent unauthorized remote access to the vulnerable modem components.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the difficulty of patching embedded modem firmware, security teams should work closely with hardware vendors to ensure updates are tested and deployed across the fleet as quickly as possible.

Description Summary:
A vulnerability in the IP Multimedia Subsystem (IMS) allows for potential system crashes due to improper input validation.

Executive Summary:
Improper input validation in the IMS framework presents a high risk of service disruption through system crashes.

Vulnerability Details

CVE-ID: CVE-2025-71251

Affected Software: IMS (IP Multimedia Subsystem)

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability stems from insufficient validation of input processed by the IMS stack. An unauthenticated attacker could send malformed packets or messages to the service, triggering a crash and resulting in a denial-of-service state.

Business Impact

The CVSS score of 7.5 highlights the potential for significant disruption to communication services. Since IMS is often critical for voice and multimedia traffic, a successful exploit could lead to widespread service outages and loss of connectivity for users.

Remediation Plan

Immediate Action: Deploy vendor-supplied patches or firmware updates that address the identified input validation flaws within the IMS stack.

Proactive Monitoring: Monitor network traffic for malformed packets or unusual spikes in service restart events.

Compensating Controls: Use network intrusion detection systems (NIDS) to identify and block traffic patterns indicative of malformed protocol exploitation.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations operating IMS infrastructure must prioritize this update, as the protocol is a critical component of telecommunications and enterprise communication services.

Description Summary:
A vulnerability in the Unisoc nr modem allows for a remote denial of service via improper input validation, leading to a potential system crash without requiring user privileges.

Executive Summary:
A critical input validation flaw in Unisoc modems allows unauthenticated remote attackers to trigger a system crash, resulting in a denial of service.

Vulnerability Details

CVE-ID: CVE-2025-69279

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100/T9100/T8200/T8300 Modems

Affected Versions: T8100/T9100/T8200/T8300 running Android 13, 14, 15, or 16

Vulnerability: This vulnerability is caused by improper input validation (CWE-20) within the nr modem component. An unauthenticated attacker can exploit this remotely to force a system crash, effectively denying service to the affected device.

Business Impact

Successful exploitation of this vulnerability results in a total loss of availability for the affected mobile device or hardware. Given the CVSS score of 7.5, the risk is high because the attack vector is network-based and requires no authentication or user interaction, making it highly automatable. This could lead to widespread service disruption for users relying on these modems for critical connectivity.

Remediation Plan

Immediate Action: Monitor the Unisoc support portal for specific firmware patch releases and apply them to all affected devices as soon as they become available.

Proactive Monitoring: Review device logs for unusual modem activity or unexpected service interruptions that may indicate a crash event.

Compensating Controls: While specific network-level controls are difficult for modem-level flaws, ensure that devices are operating within trusted network segments where possible to limit exposure to malicious traffic.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of March 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is considered highly dangerous due to its remote, unauthenticated nature and the lack of required user interaction.

Analyst Recommendation

This vulnerability presents a significant risk to device stability due to its potential for remote exploitation without authentication. Security teams should prioritize tracking vendor updates for the T8100 through T8300 modem series. Immediate application of forthcoming patches is essential to prevent potential denial of service attacks against these communication components.

Description Summary:
A vulnerability in the nr modem component of Unisoc chipsets allows for a remote system crash due to improper input validation.

Executive Summary:
A critical input validation flaw in Unisoc modems exposes devices to remote denial of service attacks without requiring user interaction or authentication.

Vulnerability Details

CVE-ID: CVE-2025-69278

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T7300/T8100/T9100/T8200/T8300 Modems

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: The vulnerability is an improper input validation flaw (CWE-20) within the nr modem component. It allows an unauthenticated, remote attacker to trigger a system crash, resulting in a denial of service.

Business Impact

The ability for a remote attacker to crash mobile device modems can lead to widespread service disruption, rendering devices unable to perform cellular communications. With a CVSS score of 7.5, this high severity vulnerability poses a significant risk to fleet availability and user productivity. Organizations relying on these devices for critical communications may face operational downtime if the vulnerability is leveraged in the wild.

Remediation Plan

Immediate Action: Review the Unisoc support announcement for specific firmware update availability and deploy patches to all affected devices as soon as they are provided by the device manufacturer.

Proactive Monitoring: Monitor device logs for recurring modem restarts or unexpected network connectivity drops that could indicate exploitation attempts.

Compensating Controls: While direct mitigation for modem-level flaws is limited, ensure that devices are running the latest security patch levels provided by the handset vendor to reduce the overall attack surface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of March 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature, which makes it highly automatable for malicious actors.

Analyst Recommendation

Given the potential for remote denial of service and the high CVSS rating, security teams should prioritize tracking firmware updates for the affected Unisoc chipsets. Ensure that communication is maintained with device vendors to receive timely security bulletins, as modem-level vulnerabilities often require vendor-specific firmware updates to resolve.

Description Summary:
A vulnerability in Unisoc NR modems allows unauthenticated remote attackers to trigger a system crash via improper input validation, resulting in a denial of service.

Executive Summary:
A critical denial of service vulnerability in Unisoc modem firmware allows unauthenticated remote attackers to crash affected mobile devices.

Vulnerability Details

CVE-ID: CVE-2025-61619

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100/T9100/T8200/T8300 Modems

Affected Versions: T8100/T9100/T8200/T8300 running Android 13, 14, 15, or 16

Vulnerability: This flaw exists due to improper input validation within the NR modem component. It permits an unauthenticated attacker to remotely cause a system crash, effectively resulting in a denial of service.

Business Impact

Successful exploitation of this vulnerability results in a denial of service, rendering the affected mobile device unresponsive or forcing a reboot. Given the CVSS score of 7.5, the impact is significant for users relying on these devices for critical communication, as it allows remote disruption of service without requiring prior authentication or user interaction.

Remediation Plan

Immediate Action: Monitor the official Unisoc support portal for firmware updates and apply them to all affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected system restarts or modem service errors that may indicate exploitation attempts.

Compensating Controls: While direct mitigation is limited for modem-level flaws, maintaining updated mobile operating systems and utilizing network-level protections may reduce the overall attack surface.

Exploitation Status

Public Exploit Available: No — exploit_available (unknown).

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature, which facilitates automated denial of service attacks against vulnerable modems.

Analyst Recommendation

This vulnerability presents a high risk to mobile device availability due to the lack of required authentication. Organizations using devices equipped with the specified Unisoc modems must prioritize the deployment of vendor-supplied firmware updates to resolve the underlying input validation error and prevent potential remote service disruption.

Description Summary:
An improper input validation vulnerability in the Unisoc NR modem allows unauthenticated remote attackers to trigger a system crash, resulting in a denial of service.

Executive Summary:
A critical vulnerability in Unisoc NR modems allows remote, unauthenticated attackers to cause a system crash, resulting in a denial of service.

Vulnerability Details

CVE-ID: CVE-2025-61618

Affected Software: Unisoc NR Modem (T8100, T9100, T8200, T8300)

Affected Versions: T8100/T9100/T8200/T8300 on Android 13, 14, 15, and 16

Vulnerability: This flaw stems from improper input validation (CWE-20) within the NR modem firmware. An unauthenticated remote attacker can supply malicious input to the modem, leading to a system-wide denial of service without requiring any user interaction or elevated privileges.

Business Impact

The vulnerability carries a CVSS score of 7.5, indicating a high severity due to the potential for remote exploitation without authentication. Successful exploitation results in a complete loss of modem availability, which effectively disconnects affected devices from cellular networks, causing significant operational disruption and loss of communication for end users.

Remediation Plan

Immediate Action: Consult the official Unisoc support announcement and apply the latest firmware updates as soon as they are made available by your device manufacturer.

Proactive Monitoring: Monitor device logs for recurring modem reset events or unexpected system reboots that may indicate exploitation attempts.

Compensating Controls: While network-level mitigations are difficult for modem-specific flaws, ensure devices are protected by robust device management policies and avoid connecting to untrusted cellular or radio environments where possible.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is considered inherently dangerous because it is remotely exploitable and does not require authentication or user interaction to achieve a denial of service.

Analyst Recommendation

Given the remote nature of this vulnerability and the lack of required authentication, organizations using devices with Unisoc T-series modems should treat this as a high-priority risk. Administrators must track vendor-specific security bulletins for their device manufacturers and deploy patches immediately upon release to prevent potential denial of service attacks.

Description Summary:
A remote denial of service vulnerability in the Unisoc modem firmware allows unauthenticated attackers to cause a system crash via improper input validation.

Executive Summary:
A critical vulnerability in Unisoc modems allows unauthenticated remote attackers to trigger a system crash, resulting in a denial of service.

Vulnerability Details

CVE-ID: CVE-2025-61617

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100, T9100, T8200, T8300 Modems

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: The vulnerability stems from improper input validation within the modem firmware, which can be exploited by an unauthenticated attacker to induce a system crash. The attack vector is network based and requires no user interaction or elevated privileges to execute.

Business Impact

The vulnerability carries a CVSS score of 7.5, indicating a high severity risk. Successful exploitation results in a complete loss of device availability, which can disrupt critical communications and services dependent on the affected mobile hardware. This denial of service capability poses a significant operational risk to users of the impacted hardware.

Remediation Plan

Immediate Action: Monitor the official Unisoc support portal for firmware updates and apply them to all affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected modem resets or network connectivity interruptions that may indicate exploitation attempts.

Compensating Controls: While direct mitigation is limited for modem firmware, ensure that device firewalls and network security policies are configured to block unauthorized traffic directed at mobile telephony components.

Exploitation Status

Public Exploit Available: No — exploit_available is unknown.

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is considered inherently dangerous because it is remotely exploitable without authentication, making it automatable for attackers.

Analyst Recommendation

Given the potential for remote denial of service on mobile hardware, organizations relying on devices utilizing Unisoc T8100, T9100, T8200, or T8300 modems must prioritize this vulnerability. Administrators should maintain close contact with their device manufacturers to receive and deploy the necessary firmware patches as soon as they are released to restore system stability and security.

Description Summary:
A vulnerability in the Unisoc NR modem allows unauthenticated remote attackers to trigger a system crash via improper input validation, resulting in a denial of service.

Executive Summary:
A critical vulnerability in the Unisoc NR modem firmware allows unauthenticated attackers to cause a remote system crash, posing a significant risk to device availability.

Vulnerability Details

CVE-ID: CVE-2025-61616

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100/T9100/T8200/T8300 NR Modem

Affected Versions: T8100/T9100/T8200/T8300 running Android 13, 14, 15, or 16

Vulnerability: This flaw involves improper input validation (CWE-20) within the NR modem component. An unauthenticated attacker can trigger this condition remotely to achieve a denial of service state, requiring no elevated privileges.

Business Impact

The ability for an unauthenticated attacker to remotely crash the modem component directly impacts the availability and reliability of affected mobile devices. Given the CVSS score of 7.5, this high-severity issue could lead to widespread service disruption, hindering communication capabilities and potentially impacting business operations that rely on these mobile platforms.

Remediation Plan

Immediate Action: Consult the official Unisoc support portal to identify and apply the latest firmware security updates provided by your specific device manufacturer.

Proactive Monitoring: Monitor device performance for unexpected reboots or modem connectivity failures, and review system logs for recurring errors related to radio interface layer (RIL) service crashes.

Compensating Controls: While direct mitigation requires firmware updates, organizations should enforce network security policies that restrict untrusted traffic from reaching mobile baseband interfaces where possible.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of March 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature, which allows for impact without user interaction.

Analyst Recommendation

This vulnerability presents a clear risk to device stability and service uptime due to the lack of required authentication. It is imperative that administrators and users verify their firmware versions against the vendor advisory and deploy the necessary patches immediately upon release by their device vendor.

Description Summary:
A vulnerability in Unisoc NR modems allows for a remote system crash due to improper input validation, leading to a denial of service.

Executive Summary:
A critical vulnerability in Unisoc modem firmware allows unauthenticated remote attackers to trigger a system crash, resulting in a denial of service.

Vulnerability Details

CVE-ID: CVE-2025-61615

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100/T9100/T8200/T8300 Modems

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: The vulnerability stems from improper input validation within the NR modem component, which can be exploited by an unauthenticated remote attacker to cause a system crash.

Business Impact

The potential for a remote denial of service poses a significant risk to device availability, particularly for mobile hardware relying on these modem chipsets. With a CVSS score of 7.5, this flaw represents a High severity risk, as it permits attackers to disrupt cellular connectivity and system stability without requiring any user interaction or elevated privileges.

Remediation Plan

Immediate Action: Monitor official communication channels from Unisoc and your device manufacturer for the release of security patches and apply them to affected firmware immediately.

Proactive Monitoring: Review system diagnostic logs for unexpected modem resets or connectivity drops that may indicate exploitation attempts.

Compensating Controls: While specific network-level mitigations are difficult for modem-level flaws, ensure that devices are running the latest security patches provided by the OEM to minimize the attack surface.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of March 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature, which allows for impact on device availability without requiring local access.

Analyst Recommendation

Given the ability for unauthenticated remote actors to cause system crashes, this vulnerability must be treated with high priority. Organizations and individual users should verify the firmware version of their Unisoc-based devices and apply updates as soon as they are made available by the vendor to prevent potential service disruptions.

Description Summary:
A vulnerability in the Unisoc nr modem allows for a remote system crash due to improper input validation.

Executive Summary:
A high-severity vulnerability in Unisoc nr modem firmware allows unauthenticated remote attackers to trigger a system crash via improper input validation.

Vulnerability Details

CVE-ID: CVE-2025-61614

Affected Software: Unisoc nr modem

Affected Versions: T7300/T8100/T9100/T8200/T8300 running Android 13, 14, 15, or 16

Vulnerability: This vulnerability is caused by improper input validation within the nr modem component. An unauthenticated attacker can exploit this flaw to cause a remote denial of service, effectively crashing the system without requiring any additional execution privileges.

Business Impact

Successful exploitation of this vulnerability results in a denial of service, which can lead to significant operational downtime for affected mobile devices. Given the CVSS score of 7.5, this is categorized as a high-severity issue because it allows for remote, unauthenticated disruption of critical system functions.

Remediation Plan

Immediate Action: Monitor the Unisoc support portal for official security patches and apply them to all affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected modem restarts or system instability that may indicate attempts to trigger this crash.

Compensating Controls: Since this is a low-level firmware vulnerability, there are limited compensating controls available, though maintaining updated Android security patches may provide indirect protections.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of March 10, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential for remote exploitation without user interaction.

Analyst Recommendation

This vulnerability presents a clear risk to device availability and system stability. IT and security administrators should prioritize firmware updates from their device manufacturers as soon as Unisoc releases the necessary patches. Until a fix is deployed, ensure that devices are running the latest available OS updates to minimize the attack surface.

Description Summary:
An improper input validation vulnerability in the NR modem firmware can be exploited to induce a system crash and disrupt 5G services through crafted data.

Executive Summary:
The NR modem firmware is vulnerable to a system crash triggered by improper input validation, posing a high risk to 5G network availability.

Vulnerability Details

CVE-ID: CVE-2025-61613

Affected Software: NR Modem Firmware (5G)

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: Similar to other flaws in the NR stack, this vulnerability involves the modem's failure to properly sanitize inputs before processing. An unauthenticated attacker can exploit this via the radio interface to cause the modem software to crash.

Business Impact

Exploitation results in a denial-of-service (DoS) condition, rendering the 5G capabilities of the device unusable until a reboot or service restart occurs. With a CVSS score of 7.5, the vulnerability represents a significant threat to mission-critical 5G communications, potentially leading to operational delays and loss of connectivity.

Remediation Plan

Immediate Action: Apply the latest firmware security updates from the hardware vendor to resolve the input validation error.

Proactive Monitoring: Review device logs for "modem subsystem crash" events and monitor for patterns of connectivity loss across multiple devices.

Compensating Controls: Utilize device management platforms (MDM) to push firmware updates at scale and enforce security policies on cellular-connected hardware.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 10, 2026, there is no public information indicating active exploitation of this vulnerability. However, the potential for targeted disruption of 5G-connected devices makes this a high-priority issue for security teams.

Analyst Recommendation

This vulnerability should be treated with high urgency. Administrators must ensure that all devices utilizing the affected NR modem firmware are updated to the latest version. Regular auditing of firmware versions across the organization’s mobile and IoT assets is recommended to identify and remediate such vulnerabilities promptly.

Description Summary:
The NR (5G) modem firmware contains an improper input validation flaw that can be triggered to cause a system crash and denial of service via malformed inputs.

Executive Summary:
A high-severity vulnerability in NR modem firmware allows for a system crash via improper input validation, leading to a denial-of-service condition for 5G connectivity.

Vulnerability Details

CVE-ID: CVE-2025-61612

Affected Software: NR Modem Firmware (5G)

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability is caused by a failure to validate inputs within the New Radio (NR) modem stack. An unauthenticated attacker can send crafted packets over the air to trigger a system crash in the modem's processing unit.

Business Impact

The primary impact is a Denial of Service (DoS) that disconnects the device from the 5G network. For businesses relying on 5G for critical infrastructure or remote operations, this could lead to significant downtime. The CVSS score of 7.5 indicates a High severity due to the ease of triggering the crash and the resulting impact on availability.

Remediation Plan

Immediate Action: Apply the latest security patches provided by the hardware vendor or cellular service provider immediately.

Proactive Monitoring: Implement network-level monitoring to detect repeated connection failures or "re-attach" requests from devices in the same geographic area.

Compensating Controls: For critical infrastructure, ensure redundant communication paths (e.g., Wi-Fi or LTE fallback) are available in the event of a 5G modem crash.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 10, 2026, there is no public information indicating active exploitation of this vulnerability. Vulnerabilities in 5G stacks are increasingly targeted as 5G adoption grows in industrial and consumer sectors.

Analyst Recommendation

Immediate remediation through firmware updates is the only effective way to mitigate this risk. Organizations should coordinate with their hardware suppliers to ensure that the 5G modem firmware is updated across the entire fleet of devices to prevent widespread service disruption.

Description Summary:
An improper input validation flaw in modem firmware allows for potential exploitation through malformed data inputs, leading to system instability or unauthorized access.

Executive Summary:
A high-severity input validation vulnerability in modem firmware could allow attackers to disrupt communications or gain unauthorized access to the device baseband.

Vulnerability Details

CVE-ID: CVE-2025-61611

Affected Software: Modem Firmware

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists in the modem's input validation logic, where the system fails to properly sanitize data received via the radio interface or local hardware hooks. This allows an unauthenticated attacker to submit malformed inputs that the firmware cannot safely process.

Business Impact

A successful exploit could result in a complete loss of network connectivity, device instability, or the execution of unauthorized commands within the baseband environment. The CVSS score of 7.5 reflects a High severity, as it impacts the fundamental availability and integrity of the communication device, potentially affecting large-scale IoT or mobile deployments.

Remediation Plan

Immediate Action: Deploy the latest firmware updates provided by the device manufacturer or carrier to correct the input validation logic.

Proactive Monitoring: Monitor for frequent, unexplained modem resets or drops in connectivity which may indicate an exploitation attempt.

Compensating Controls: Restrict access to the modem's diagnostic interfaces and ensure that only signed firmware updates can be applied to the device.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 10, 2026, there is no public information indicating active exploitation of this vulnerability. However, modem-level flaws are critical as they reside below the operating system layer, making detection and remediation more complex.

Analyst Recommendation

IT administrators should prioritize firmware management for all mobile and IoT devices containing the affected modem components. Immediate application of the manufacturer's security patch is essential to maintain service availability and protect the device from remote disruption.

Description Summary:
An improper input validation flaw in Unisoc NR modems allows unauthenticated remote attackers to trigger a system crash, resulting in a denial of service.

Executive Summary:
A critical denial of service vulnerability exists in Unisoc modem firmware that allows unauthenticated remote attackers to crash affected mobile devices.

Vulnerability Details

CVE-ID: CVE-2025-61610

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100/T9100/T8200/T8300 Modems

Affected Versions: Android 13, 14, 15, and 16

Vulnerability: The vulnerability is caused by improper input validation within the NR modem firmware, which can be exploited by an unauthenticated remote attacker to induce a system crash.

Business Impact

The ability for a remote, unauthenticated attacker to cause a system crash poses a significant risk to device availability and operational continuity. Given the CVSS score of 7.5, this high-severity flaw could lead to widespread service disruption for mobile users, impacting both personal and enterprise communication workflows.

Remediation Plan

Immediate Action: Monitor the official Unisoc support portal for firmware updates and apply them to affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected modem restarts or connectivity drops that may indicate exploitation attempts.

Compensating Controls: While direct mitigation is limited for modem firmware, users should maintain device security patches and restrict exposure to untrusted wireless networks where possible.

Exploitation Status

Public Exploit Available: No (exploit_available: unknown)

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly automatable, which increases the risk of potential future exploitation.

Analyst Recommendation

This vulnerability presents a clear risk to device stability, and the lack of required privileges for an attacker makes it particularly concerning. Organizations deploying devices with Unisoc chipsets should prioritize the deployment of vendor security updates the moment they are released to prevent potential denial of service attacks.

Description Summary:
A remote denial of service vulnerability exists in Unisoc modems due to improper input validation, allowing unauthenticated attackers to cause a system crash.

Executive Summary:
A critical vulnerability in Unisoc modem firmware allows unauthenticated remote attackers to trigger a system crash, resulting in a denial of service.

Vulnerability Details

CVE-ID: CVE-2025-61609

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. Modem T8100, T9100, T8200, and T8300

Affected Versions: Android 13, 14, 15, and 16

Vulnerability: The flaw is caused by improper input validation within the modem firmware. An unauthenticated attacker can exploit this via the network to trigger a system crash, as no additional execution privileges are required.

Business Impact

The ability for an unauthenticated remote attacker to crash a device modem poses a significant risk to service availability. This vulnerability could lead to widespread disruption of mobile connectivity for end users, potentially impacting business operations that rely on cellular data. Given the CVSS score of 7.5, this is considered a High severity issue that requires prioritized attention to maintain infrastructure stability.

Remediation Plan

Immediate Action: Consult the official Unisoc support announcement to determine if a firmware update is available for your specific device model and carrier implementation.

Proactive Monitoring: Monitor device logs for unexpected modem restarts, signal drops, or recurring system stability issues that may indicate exploitation attempts.

Compensating Controls: While direct mitigation is limited for firmware-level issues, ensure that devices are managed through enterprise mobility management solutions to enforce security policies and monitor for anomalous network behavior.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous because it is remotely exploitable without authentication, making it a prime candidate for automated scanning and exploitation.

Analyst Recommendation

This vulnerability represents a significant risk to mobile device availability due to the ease of remote exploitation. Security teams should prioritize identifying affected hardware within their environment and work with device manufacturers or service providers to obtain the necessary firmware patches. Immediate action is required to minimize the window of exposure to potential denial of service attacks.

Description Summary:
A remote denial of service vulnerability exists in Unisoc modem firmware due to improper input validation, allowing unauthenticated attackers to trigger a system crash.

Executive Summary:
A critical vulnerability in Unisoc modem firmware allows unauthenticated remote attackers to trigger a system crash, resulting in a denial of service.

Vulnerability Details

CVE-ID: CVE-2025-61608

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100/T9100/T8200/T8300 Modems

Affected Versions: T8100/T9100/T8200/T8300 running Android 13, 14, 15, or 16

Vulnerability: The vulnerability stems from improper input validation (CWE-20) within the nr modem software. This flaw permits an unauthenticated attacker to remotely cause a system crash, impacting device availability.

Business Impact

Successful exploitation of this vulnerability results in a denial of service, rendering the affected mobile or embedded device unresponsive. With a CVSS score of 7.5, the risk is classified as High due to the lack of required authentication and the ease of network-based exploitation. Business operations relying on these devices for communication or data connectivity may face significant disruption.

Remediation Plan

Immediate Action: Monitor the official Unisoc support portal for the release of security patches and apply firmware updates to affected hardware as soon as they become available.

Proactive Monitoring: Review system logs for unexpected modem resets or intermittent connectivity loss that may indicate attempted exploitation.

Compensating Controls: While direct network-level mitigation is difficult for modem-specific flaws, ensure that devices are isolated from untrusted networks where possible to limit the exposure of the baseband processor.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any network-adjacent attacker capable of sending specially crafted input to the modem interface.

Analyst Recommendation

Given the potential for remote denial of service on widely deployed cellular hardware, organizations using affected Unisoc-based devices should prioritize tracking vendor security bulletins. Once a patch is released by the device manufacturer or Unisoc, it should be deployed across the fleet immediately to prevent service outages.

Description Summary:
A vulnerability in the Unisoc NR modem allows for a remote system crash via improper input validation, leading to a denial of service.

Executive Summary:
A critical vulnerability in Unisoc modem firmware allows unauthenticated attackers to trigger a remote denial of service by exploiting improper input validation.

Vulnerability Details

CVE-ID: CVE-2025-61607

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100/T9100/T8200/T8300 Modems

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: The vulnerability is caused by improper input validation within the modem firmware. This flaw allows an unauthenticated attacker to remotely trigger a system crash without requiring any additional execution privileges.

Business Impact

The ability for an attacker to remotely crash a mobile device modem results in a complete loss of cellular connectivity, causing significant service disruption. With a CVSS score of 7.5, this vulnerability is classified as High severity, as it enables remote denial of service against mobile infrastructure without requiring user interaction or authentication.

Remediation Plan

Immediate Action: Monitor the official Unisoc support portal for firmware updates addressing this vulnerability and apply them to affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected modem resets or persistent connectivity failures that may indicate exploitation attempts.

Compensating Controls: While specific network-level controls are difficult for this hardware-level flaw, users should ensure that device security policies are enforced and that only necessary network features are enabled.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature, which allows for impact on availability without localized access.

Analyst Recommendation

Given the high impact on device availability and the lack of required authentication, organizations managing fleets of devices using these Unisoc chipsets should prioritize monitoring for vendor-supplied patches. Organizations must treat this as a high-priority update once the vendor releases a fix, as remote denial of service vulnerabilities are frequently targeted for disruption.

Description Summary:
A critical input validation flaw in Unisoc modem firmware allows unauthenticated remote attackers to trigger a system crash and potentially escalate privileges.

Executive Summary:
A critical remote code execution and privilege escalation vulnerability in Unisoc modem firmware poses a significant risk to mobile device integrity.

Vulnerability Details

CVE-ID: CVE-2025-31718

Affected Software: Unisoc Modem Firmware

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: The vulnerability exists within the modem firmware due to improper input validation, which can be triggered by an unauthenticated remote attacker. This flaw allows for a system crash and facilitates remote escalation of privilege without requiring any user interaction or existing execution privileges.

Business Impact

The ability for an unauthenticated remote attacker to gain escalated privileges on a mobile device represents a severe security breach, potentially leading to total loss of device control and unauthorized access to sensitive user data. Given the CVSS score of 9.8, this vulnerability is classified as critical, as it allows for widespread impact across various mobile devices using the affected Unisoc chipsets. Organizations should treat this as a high priority threat, particularly for fleets of managed mobile devices.

Remediation Plan

Immediate Action: Apply the latest firmware updates provided by the device manufacturer or mobile service provider to patch the vulnerable modem software.

Proactive Monitoring: Monitor device performance for unexplained system crashes or unexpected modem restarts that could indicate exploitation attempts.

Compensating Controls: Ensure devices are running the latest security patches and avoid connecting to untrusted or public cellular networks where potential signal-based attacks may be delivered.

Exploitation Status

Public Exploit Available: No — there is no confirmed public exploit in the available data.

Analyst Notes: As of Oct 11, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature and the high impact on the device system.

Analyst Recommendation

Due to the critical nature of this vulnerability and the potential for remote exploitation without user interaction, immediate action is required. Organizations should prioritize updating all mobile devices utilizing the affected Unisoc chipsets as soon as patches become available from their respective vendors. Failure to remediate this flaw exposes devices to a high risk of compromise and privilege escalation.

Description Summary:
A critical vulnerability in the Unisoc modem firmware allows an unauthenticated remote attacker to trigger a system crash via improper input validation, leading to a denial of service.

Executive Summary:
A critical remote denial of service vulnerability in Unisoc modem firmware affects devices running Android 13 through 16 and requires immediate attention to prevent system instability.

Vulnerability Details

CVE-ID: CVE-2025-31717

Affected Software: Unisoc Modem Firmware (T750/T765/T760/T770/T820/S8000/T8300/T9300)

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: The vulnerability stems from improper input validation within the modem component (CWE-20). An unauthenticated remote attacker can exploit this flaw to cause a system crash, resulting in a denial of service condition without requiring any elevated user privileges.

Business Impact

The CVSS score of 9.8 reflects the high severity of this flaw, as it allows for a complete loss of availability via a remote, unauthenticated vector. A successful exploit could render mobile devices unresponsive or force a reboot, causing significant disruption to communication services and potential loss of data for affected users.

Remediation Plan

Immediate Action: Contact your device manufacturer or service provider to verify the availability of a security patch and update the affected device firmware to the latest version provided.

Proactive Monitoring: Monitor device logs for unexpected modem resets or frequent system crashes that might indicate an exploitation attempt.

Compensating Controls: While direct mitigation for modem-level flaws is limited, ensure that devices are managed through enterprise mobile device management (MDM) solutions to enforce security policy updates and monitor for anomalous device behavior.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of Oct 11, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature and the critical role of the modem in device operation.

Analyst Recommendation

Given the high CVSS score and the potential for remote disruption of mobile devices, this vulnerability poses a significant risk to operational stability. Administrators should prioritize the deployment of firmware updates as soon as they are released by the vendor to mitigate the risk of denial of service attacks.

Description Summary:
The vowifi service contains a command injection vulnerability due to improper input validation, allowing unauthenticated attackers to achieve remote privilege escalation.

Executive Summary:
A critical command injection vulnerability in the Unisoc vowifi service allows unauthenticated remote attackers to achieve full system compromise.

Vulnerability Details

CVE-ID: CVE-2025-31715

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. vowifi service

Affected Versions: SL8521E, SL8521ET, SL8541E, UIS8141E, UWS6137, UWS6137E, UWS6151(E), UWS6152 running Mocor5, Android 8.1, or Android 9

Vulnerability: The flaw is a command injection vulnerability (CWE-77) triggered by improper input validation within the vowifi service. An unauthenticated attacker can exploit this via the network to execute arbitrary commands with elevated privileges.

Business Impact

The CVSS score of 9.8 reflects the high severity of this vulnerability, as it requires no authentication and provides total control over the affected device. Successful exploitation could lead to complete system takeover, unauthorized access to sensitive user data, and the potential for the device to be used as a pivot point within the local network, causing significant operational and security risks.

Remediation Plan

Immediate Action: Organizations should review the vendor advisory provided by Unisoc and apply the latest firmware or software updates as soon as they are made available for the affected chipsets.

Proactive Monitoring: Monitor device and network logs for suspicious shell execution patterns, unexpected outbound traffic, or unauthorized service requests originating from the vowifi component.

Compensating Controls: Implement network segmentation to isolate vulnerable devices from critical infrastructure and use intrusion detection systems to identify and block malformed inputs targeting the vowifi service.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 18, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Given the nature of command injection flaws, the barrier to creating a functional exploit is relatively low, and the lack of authentication requirements significantly increases the risk profile of this vulnerability.

Analyst Recommendation

Due to the critical nature of this vulnerability and its potential for unauthenticated remote code execution, it must be treated as a high priority for remediation. Administrators should verify the firmware versions of all deployed Unisoc-based hardware and coordinate with the vendor to ensure that patches are applied immediately upon release to prevent potential exploitation.

Description Summary:
A command injection vulnerability exists within the engineer mode service of specific Unisoc chipsets, allowing for local privilege escalation due to improper input validation.

Executive Summary:
A high-severity command injection vulnerability in Unisoc engineer mode services could allow an attacker to achieve local privilege escalation on affected devices.

Vulnerability Details

CVE-ID: CVE-2025-31713

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. chipsets (SL8521E, SL8521ET, SL8541E, UIS8141E, UWS6137, UWS6137E, UWS6151(E), UWS6152)

Affected Versions: Mocor5/Android 8.1

Vulnerability: This flaw is a command injection issue (CWE-77) triggered by improper input validation in the engineer mode service. The CVSS vector (AV:L/PR:N/UI:N) indicates that an attacker does not require authentication or user interaction to execute commands, provided they have local access to the device.

Business Impact

The vulnerability carries a CVSS score of 8.4, reflecting a high risk to system integrity and confidentiality. Successful exploitation grants an attacker elevated privileges locally, which could lead to complete device compromise, unauthorized data access, or the deployment of persistent malicious software. This poses a significant security risk for organizations relying on these chipsets for mobile or embedded deployments.

Remediation Plan

Immediate Action: Consult the official Unisoc security advisory for available firmware updates or patches specific to your device model.

Proactive Monitoring: Review system logs for unusual process execution or unauthorized attempts to access engineer mode services.

Compensating Controls: Restrict physical access to devices and utilize mobile device management (MDM) policies to disable unnecessary services or features where possible.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 19, 2025, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. While the exploit is local, the lack of required privileges makes it a significant concern for internal device security.

Analyst Recommendation

Given the potential for local privilege escalation, this vulnerability should be treated with high urgency. Administrators must track the vendor's security announcements and apply relevant firmware updates as soon as they are released to prevent potential exploitation.

Description Summary:
A null pointer dereference in the Unisoc modem firmware allows an unauthenticated remote attacker to cause a system crash, resulting in a denial of service condition.

Executive Summary:
A critical denial of service vulnerability in Unisoc modem firmware allows unauthenticated remote attackers to crash affected devices.

Vulnerability Details

CVE-ID: CVE-2025-3012

Affected Software: Unisoc T8100/T9100/T8200/T8300 Modems

Affected Versions: Android 13, 14, 15, and 16

Vulnerability: The vulnerability involves a null pointer dereference within the dpc modem component. An unauthenticated attacker can trigger this condition remotely without requiring any specific user interaction or elevated privileges.

Business Impact

Successful exploitation of this vulnerability results in a system crash, causing a denial of service for the device. Given the CVSS score of 7.5, this high severity flaw poses a significant risk to operational continuity, particularly for mobile devices relying on cellular connectivity for critical communication.

Remediation Plan

Immediate Action: Consult the official Unisoc support portal for firmware updates corresponding to your specific device model and Android version.

Proactive Monitoring: Monitor device logs for unexpected modem restarts or recurring system stability issues that may indicate exploitation attempts.

Compensating Controls: While direct mitigation requires a vendor patch, ensure that device security policies are enforced and that only necessary network features are active to reduce the attack surface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature and the potential for complete service disruption.

Analyst Recommendation

The severity of this vulnerability necessitates immediate attention from organizations deploying devices equipped with the affected Unisoc modem chipsets. Administrators should prioritize the deployment of manufacturer-provided firmware updates as soon as they become available to prevent remote denial of service attacks against their mobile fleet.

Description Summary:
A vulnerability in Unisoc modem firmware allows unauthenticated attackers to trigger a system crash via improper input validation, leading to a remote denial of service.

Executive Summary:
A remote denial of service vulnerability exists in multiple Unisoc modem chipsets that allows unauthenticated attackers to crash the system via improper input validation.

Vulnerability Details

CVE-ID: CVE-2025-11133

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100/T9100/T8200/T8300 modems

Affected Versions: Unisoc T8100/T9100/T8200/T8300 running Android 13, 14, 15, or 16

Vulnerability: This flaw is caused by improper input validation (CWE-20) within the modem firmware. An unauthenticated attacker can exploit this remotely without requiring any specific user interaction or elevated privileges to cause a system crash.

Business Impact

The ability for an unauthenticated remote attacker to force a system crash presents a significant availability risk for mobile devices utilizing these chipsets. With a CVSS score of 7.5, this high severity issue could disrupt critical communication services and business operations by rendering devices non-functional until a reboot occurs.

Remediation Plan

Immediate Action: Consult the official Unisoc security announcement at the provided reference link and apply all relevant firmware updates as soon as they are made available by your device manufacturer.

Proactive Monitoring: Monitor device logs for unexpected reboots or modem service restarts that may indicate successful exploitation attempts.

Compensating Controls: Since this vulnerability exists at the firmware level, standard network-based WAFs may provide limited protection, making the application of vendor-supplied patches the only reliable mitigation.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its remote, unauthenticated nature and lack of required user interaction.

Analyst Recommendation

Given the remote exploitability and the potential for full service denial, this vulnerability poses a substantial risk to device availability. Organizations should prioritize updating affected mobile hardware as soon as the manufacturer releases the necessary firmware patches to ensure the stability and security of their mobile fleet.

Description Summary:
A vulnerability in Unisoc modems allows unauthenticated remote attackers to trigger a system crash via improper input validation.

Executive Summary:
The Unisoc modem vulnerability permits a remote denial of service attack, posing a significant stability risk to affected mobile devices.

Vulnerability Details

CVE-ID: CVE-2025-11132

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. T8100/T9100/T8200/T8300 modems

Affected Versions: Android 13, Android 14, Android 15, Android 16

Vulnerability: The flaw is caused by improper input validation (CWE-20) within the modem firmware. An unauthenticated remote attacker can supply crafted input to the modem to force a system crash, resulting in a denial of service.

Business Impact

The ability for a remote attacker to crash the modem without any privileges or user interaction represents a high risk to availability. With a CVSS score of 7.5, this vulnerability could be leveraged to disrupt communications for mobile users, potentially impacting business continuity for organizations relying on these devices for mobile connectivity and remote workforce operations.

Remediation Plan

Immediate Action: Check for and apply the latest firmware or security patch provided by your device manufacturer or mobile service provider.

Proactive Monitoring: Monitor device stability and connectivity logs for unexpected modem resets or intermittent network drops that may indicate exploitation attempts.

Compensating Controls: While direct mitigation is limited for mobile hardware, ensure that device security policies are enforced and that only necessary network features are enabled.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is considered highly automatable, meaning the barrier to entry for an attacker is low, despite the lack of a known public exploit.

Analyst Recommendation

Given the potential for remote denial of service and the automatable nature of this vulnerability, administrators should prioritize the deployment of vendor-supplied security updates as soon as they become available. Users should remain vigilant for device instability and ensure their systems are running the most current firmware version to mitigate the risk of exploitation.

Description Summary:
A vulnerability in Unisoc modem firmware allows unauthenticated remote attackers to trigger a system crash via improper input validation.

Executive Summary:
A critical vulnerability in Unisoc modem firmware poses a significant risk of remote denial of service, allowing attackers to crash affected mobile devices without user interaction.

Vulnerability Details

CVE-ID: CVE-2025-11131

Affected Software: Unisoc T8100, T9100, T8200, and T8300 modems

Affected Versions: Android 13, 14, 15, and 16

Vulnerability: The flaw stems from improper input validation within the modem firmware, categorized as CWE-20. An unauthenticated remote attacker can exploit this weakness to cause a system crash, resulting in a denial of service.

Business Impact

The exploitation of this vulnerability results in an immediate loss of device availability, which can disrupt critical communication and mobile services. With a CVSS score of 7.5, this high-severity issue is particularly concerning as it requires no user interaction or elevated privileges, making it a viable target for automated remote attacks against mobile infrastructure.

Remediation Plan

Immediate Action: Users and administrators should check for and apply the latest security updates provided by the device manufacturer or mobile service provider.

Proactive Monitoring: Security teams should monitor device logs for unexpected system reboots or modem-related error codes that could indicate an exploitation attempt.

Compensating Controls: While direct mitigation on modem firmware is limited, maintaining updated Android security patches and avoiding untrusted network connections can reduce the overall attack surface.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of December 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its potential for unauthenticated remote triggering, which permits automated exploitation attempts.

Analyst Recommendation

Given the high severity of this vulnerability and the potential for remote denial of service, prioritize the deployment of vendor-supplied firmware updates as soon as they become available. Ensure that all devices utilizing the affected Unisoc modem chipsets are included in patch management cycles to minimize the risk of service disruption.

Description Summary:
A missing payload size check in the BootRom of multiple Unisoc chipsets allows for a memory buffer overflow, potentially leading to remote code execution without requiring authentication.

Executive Summary:
A critical buffer overflow vulnerability in Unisoc BootRom enables unauthenticated attackers to achieve remote code execution, presenting a severe risk to affected mobile and IoT devices.

Vulnerability Details

CVE-ID: CVE-2022-38696

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. BootRom

Affected Versions: SC9863A, T310, T610, T618, T606, T612, T616, T760, T770, T820, S8000, T750, T765

Vulnerability: The vulnerability exists due to a missing payload size check within the BootRom, which can be exploited to trigger a memory buffer overflow. The attack vector is network-based and requires no user interaction or authentication to execute.

Business Impact

Successful exploitation of this flaw grants an attacker full control over the affected hardware, leading to potential data exfiltration, device bricking, or persistent malware installation. Given the CVSS score of 9.8, this vulnerability is classified as critical, as it bypasses standard security boundaries in the device firmware. Organizations relying on these chipsets face significant security and operational risks if devices are exposed to untrusted networks.

Remediation Plan

Immediate Action: Contact the device manufacturer or vendor to obtain and apply the specific firmware update or security patch that addresses this BootRom vulnerability.

Proactive Monitoring: Monitor device traffic for anomalous patterns originating from the boot process or unexpected communication attempts to external servers.

Compensating Controls: Ensure devices are isolated within trusted network segments and utilize hardware-based security modules or device management policies to restrict unauthorized firmware access.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the technical research write-up provided by NCC Group.

Analyst Notes: As of September 1, 2025, there is no public information indicating active exploitation in the wild. However, the presence of a technical research write-up documenting the exploit mechanism makes the vulnerability highly actionable for sophisticated threat actors.

Analyst Recommendation

Due to the critical nature of this vulnerability and the low barrier to entry for exploitation, immediate action is required to verify device firmware versions. Administrators should prioritize patching all affected Unisoc-based hardware to prevent potential remote compromise and ensure the integrity of the device boot sequence.

Description Summary:
A vulnerability in the Unisoc BootRom involving an unchecked command index allows for local privilege escalation.

Executive Summary:
A critical security flaw in multiple Unisoc System-on-Chip (SoC) BootRom components could allow a local attacker to achieve full privilege escalation on the affected device.

Vulnerability Details

CVE-ID: CVE-2022-38695

Affected Software: Unisoc SC9863A, T310, T610, T618, T606, T612, T616, T760, T770, T820, S8000

Affected Versions: Unisoc SC9863A, T310, T610, T618, T606, T612, T616, T760, T770, T820, S8000

Vulnerability: The vulnerability exists within the BootRom, where an unchecked command index can be manipulated. This flaw allows a local user to escalate privileges without requiring additional execution permissions.

Business Impact

The ability to perform local privilege escalation poses a significant risk to data integrity and device security. A successful exploit grants the attacker elevated control over the device, which could lead to the theft of sensitive user data, unauthorized access to system functions, or persistent compromise. With a CVSS score of 7.8, this vulnerability is classified as High severity, necessitating prompt attention to mitigate potential unauthorized access.

Remediation Plan

Immediate Action: Contact the device manufacturer or firmware provider to determine if a security update addressing this BootRom vulnerability is available for your specific hardware model.

Proactive Monitoring: Monitor device logs for unusual behavior or unauthorized attempts to access system-level commands that typically require elevated privileges.

Compensating Controls: Ensure that device storage is encrypted and that access to the physical device is restricted to authorized personnel to prevent local exploitation attempts.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of September 2, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is technically significant because it resides in the immutable BootRom, which complicates patching and remediation efforts.

Analyst Recommendation

Given the nature of this vulnerability, which resides in the foundational BootRom code, remediation options may be limited to vendor-supplied firmware updates. Security teams should prioritize identifying devices using the affected Unisoc chipsets and engage with vendors for patch availability. Immediate action is required to verify the security posture of these devices and ensure that protective measures are in place to prevent local access by unauthorized parties.

Description Summary:
A vulnerability in the Unisoc BootRom allows for an unchecked write address, potentially enabling local privilege escalation without requiring additional execution privileges.

Executive Summary:
A critical vulnerability in Unisoc BootRom allows local attackers to achieve privilege escalation, posing a severe risk to device integrity.

Vulnerability Details

CVE-ID: CVE-2022-38694

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. BootRom (SC9863A, T310, T610, T618)

Affected Versions: SC9863A, T310, T610, T618

Vulnerability: The vulnerability is an unchecked write address flaw within the BootRom, which acts as a low-level initialization component. An attacker with local access can exploit this to gain elevated privileges on the affected hardware.

Business Impact

Successful exploitation of this flaw allows a local user to bypass security boundaries and achieve full system control. With a CVSS score of 7.8, this represents a high-severity risk, as it compromises the root of trust of the hardware, potentially leading to total data compromise and persistent unauthorized access.

Remediation Plan

Immediate Action: Contact the device manufacturer or firmware provider to determine if a security patch is available for your specific hardware implementation.

Proactive Monitoring: Monitor for unusual system behavior or unauthorized attempts to access low-level debug interfaces that might indicate exploitation attempts.

Compensating Controls: Restrict physical access to devices and ensure that USB debugging and other hardware-level interfaces are disabled in production environments.

Exploitation Status

Public Exploit Available: Yes, multiple public proofs-of-concept exist as evidenced by various GitHub repositories.

Analyst Notes: As of September 2, 2025, there is no confirmed active exploitation in the wild, though several public proof-of-concept repositories are available on GitHub. Given the nature of BootRom vulnerabilities, they are inherently difficult to patch and provide a powerful vector for persistent, high-privilege compromise.

Analyst Recommendation

Given the high CVSS score and the critical nature of BootRom vulnerabilities, it is imperative to treat this as a high-priority issue. Administrators should prioritize identifying vulnerable hardware within their fleet and coordinate with vendors to apply the necessary firmware updates as soon as they become available to prevent potential local privilege escalation.

Description Summary:
A missing payload size check in the FDL1 bootloader component of various Unisoc SoCs can lead to a memory buffer overflow, potentially allowing unauthenticated code execution.

Executive Summary:
A critical buffer overflow vulnerability in the FDL1 bootloader of multiple Unisoc chipsets permits unauthenticated attackers to achieve remote code execution.

Vulnerability Details

CVE-ID: CVE-2022-38693

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. SC9863A, T310, T610, T618, T606, T612, T616, T760, T770, T820, S8000, T750, T765

Affected Versions: SC9863A, T310, T610, T618, T606, T612, T616, T760, T770, T820, S8000, T750, T765

Vulnerability: The vulnerability consists of a missing payload size check in the FDL1 bootloader, which allows an unauthenticated attacker to trigger a memory buffer overflow during the boot process.

Business Impact

Successful exploitation of this flaw allows an attacker to gain full control over the affected device at a very low level, potentially bypassing secure boot mechanisms. Given the CVSS score of 9.8, this represents a critical risk that could lead to complete device compromise, unauthorized data access, and persistent malware installation.

Remediation Plan

Immediate Action: Contact the device manufacturer or firmware provider immediately to obtain and apply the latest security updates that address this bootloader flaw.

Proactive Monitoring: Monitor device logs for abnormal boot patterns or unexpected firmware integrity failures that may indicate an attempt to exploit the FDL1 component.

Compensating Controls: Ensure that physical access to devices is restricted and utilize secure configuration baselines to limit the attack surface where possible.

Exploitation Status

Public Exploit Available: Yes, a technical write-up by NCC Group detailing the vulnerability mechanism exists.

Analyst Notes: As of September 1, 2025, there is no public information indicating active exploitation in the wild. However, the existence of a detailed research write-up provides the necessary technical information for an attacker to develop a functional exploit.

Analyst Recommendation

Due to the critical nature of this vulnerability and its location within the device bootloader, the risk of total system compromise is extreme. Organizations utilizing hardware powered by the affected Unisoc chipsets must prioritize firmware updates and coordinate closely with their hardware vendors to verify the availability and application of the necessary patches.

Description Summary:
A missing size check for RSA keys in the Unisoc BootROM leads to a memory buffer overflow, allowing for unauthenticated remote code execution.

Executive Summary:
The Unisoc BootROM contains a critical buffer overflow vulnerability that allows unauthenticated attackers to achieve remote code execution on affected mobile system-on-chip platforms.

Vulnerability Details

CVE-ID: CVE-2022-38692

Affected Software: Unisoc SC9863A, T310, T610, T618, T606, T612, T616, T760, T770, T820, S8000

Affected Versions: Unisoc SC9863A, T310, T610, T618, T606, T612, T616, T760, T770, T820, S8000

Vulnerability: The flaw exists within the BootROM during Certificate Type 0 validation, where a missing size check for RSA keys enables a memory buffer overflow. This vulnerability is exploitable by an unauthenticated attacker without the need for additional execution privileges.

Business Impact

Successful exploitation of this vulnerability poses a severe risk to device integrity, potentially allowing an attacker to gain full control over the affected hardware. Given the CVSS score of 9.8, this represents a critical threat that could lead to complete system compromise, unauthorized data access, and the bypass of secure boot chains, necessitating immediate attention from device manufacturers and security teams.

Remediation Plan

Immediate Action: Coordinate with the device manufacturer to obtain and apply the latest firmware updates that address this BootROM vulnerability.

Proactive Monitoring: Monitor device logs for unusual boot behavior or unexpected system crashes that may indicate exploitation attempts.

Compensating Controls: Since this is a low-level hardware vulnerability, traditional software-based WAF controls are ineffective; focus on physical device security and ensuring only trusted firmware is installed.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of September 1, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The nature of the flaw in the BootROM makes it highly dangerous as it operates below the level of the operating system, making it difficult to detect or remediate once compromised.

Analyst Recommendation

This vulnerability is classified as critical due to its potential for unauthenticated remote code execution within the root of trust. Organizations using devices equipped with the affected Unisoc chipsets must prioritize firmware updates and maintain close communication with hardware vendors to ensure patches are applied as soon as they become available.

Description Summary:
A missing validation vulnerability in the BootROM of various Unisoc chipsets allows for local escalation of privilege.

Executive Summary:
A critical privilege escalation vulnerability exists in Unisoc BootROM affecting multiple chipset models, potentially granting attackers full control over the device.

Vulnerability Details

CVE-ID: CVE-2022-38691

Affected Software: Unisoc (Shanghai) Technologies Co., Ltd. BootROM

Affected Versions: SC9863A, T310, T610, T618

Vulnerability: The flaw involves a missing validation check for Certificate Type 0 within the BootROM. This vulnerability can be triggered by a local attacker to achieve privilege escalation without requiring additional execution permissions.

Business Impact

The ability to escalate privileges at the BootROM level poses a significant security risk, as it allows for the bypass of secure boot chains and the execution of arbitrary code with the highest level of system authority. Given the CVSS score of 7.8, this vulnerability carries a high impact on system integrity, confidentiality, and availability. Compromise at this level typically results in total device takeover, which is difficult to detect and often impossible to remediate without specialized hardware access.

Remediation Plan

Immediate Action: Contact the device manufacturer or vendor to obtain firmware updates that address the BootROM vulnerability.

Proactive Monitoring: Monitor for unusual system behavior or unauthorized modifications to the boot process, though low-level hardware compromises may evade standard operating system logging.

Compensating Controls: Implement strict physical access controls to devices to prevent unauthorized local interaction, as the attack vector requires local access to the hardware.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the referenced GitHub repository.

Analyst Notes: As of September 2, 2025, there is no public information indicating active exploitation in the wild. While active exploitation is not confirmed, the presence of a public proof-of-concept repository necessitates that this vulnerability be treated as a credible and serious security risk.

Analyst Recommendation

Organizations utilizing devices powered by the affected Unisoc chipsets should prioritize the identification of vulnerable hardware in their fleet. Because the vulnerability resides in the BootROM, remediation is dependent on vendor-supplied firmware patches. Administrators must engage with their hardware vendors to confirm if a patch is available for their specific model and apply it as soon as it is provided to mitigate the risk of unauthorized privilege escalation.