Summary

Minutia

CVE ID CVE-2026-79405
Title Improper Input Validation in Modem Firmware
Description In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.
Technology Area Modem
Vulnerability Type CWE-20 Improper Input Validation
Access Vector Network
CVSS Rating High
CVSS Score 7.5
CVSS String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Chipsets* UDX710

CVE ID CVE-2026-80335
Title Out-of-bounds Write in Bootloader
Description In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.
Technology Area Bootloader
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Physical
CVSS Rating High
CVSS Score 8.4
CVSS String CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Chipsets* SC9863A, SC9832E, SC7731E, T310, T610, T618, T7200, T7225, T7250, T7255, T7280, T8100, T9100, T8200, T7300, T8300

CVE ID CVE-2026-121803
Title Out-of-bounds Write in UFS Firmware
Description In UFS Field Firmware Update (FFU) functionality, there is a possible out-of-bounds write due to missing bounds checking on the PRDT table size. This could lead to local code execution or denial of service with no additional execution privileges needed.
Technology Area Storage
Vulnerability Type CWE-787 Out-of-bounds Write
Access Vector Physical
CVSS Rating High
CVSS Score 8.8
CVSS String CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Chipsets*

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition

Version