总结

细节

CVE ID CVE-2026-66085
标题 Information Disclosure in Modem
漏洞描述 In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Local
CVSS 等级 Medium
CVSS 分数 5.5
CVSS 评分 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
影响芯片* T8100, T9100, T8300

CVE ID CVE-2026-66086
标题 Stack-based Buffer Overflow in Modem
漏洞描述 In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-121 Stack-based Buffer Overflow
攻击途径 Network
CVSS 等级 High
CVSS 分数 8.3
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
影响芯片* T8100, T9100, UDX710

CVE ID CVE-2026-87765
标题 Improper Input Validation in Kernel APsys DVFS
漏洞描述 In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.
技术领域 kernel
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Local
CVSS 等级 Medium
CVSS 分数 5.5
CVSS 评分 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
影响芯片* T610, T618, T7200, T7225, T7250, T7255, T7280, T8100, T9100, T8200, T7300, T8300

*受影响芯片组列表可能不完整。如需了解最新信息，OEM可直接访问 https://unisupport.unisoc.com

漏洞类型定义

版本