CVE-2026-21553

Unisoc · T8100/T9100/T8200/T8300

A vulnerability in the Unisoc modem firmware allows for improper input validation, which may lead to system instability or denial of service.

Executive summary

A high-severity input validation vulnerability in Unisoc modem firmware affects devices running Android 13 through 16, creating a risk of service disruption.

Vulnerability

The modem component fails to properly validate input, which could be leveraged by an unauthenticated attacker. This represents a high-severity flaw impacting the availability of the affected modem hardware.

Business impact

With a CVSS score of 7.5, this vulnerability presents a serious risk to operational continuity. Unauthorized parties could trigger a denial of service on the modem, causing loss of network access and potentially impacting critical business functions dependent on cellular connectivity.

Remediation

Immediate Action: Periodically check the Unisoc product security bulletin for the release of firmware patches and deploy them through the standard device management lifecycle.

Proactive Monitoring: Review system logs for signs of abnormal modem behavior or repeated service failures.

Compensating Controls: Restrict unnecessary network exposure where possible, though the nature of modem firmware often limits the effectiveness of traditional network-level controls.

Exploitation status

Public Exploit Available: No (exploit_available: false)

Analyst recommendation

Security teams should treat this as a high-priority item for mobile device fleets. Maintain communication with the device manufacturer to ensure that security updates provided by Unisoc are integrated into the monthly security patch cycle.