Unisoc vulnerabilities

We track 107 vulnerabilities in Unisoc products across 32 products. 107 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.

107vulnerabilities

3critical

104high

0exploited

7.8average CVSS score

Latest Unisoc vulnerabilities

9.8 Critical severity
Modem: Stack-based Buffer Overflow
CVE-2026-66086Oct 12, 2026Unisoc
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
7.5 High severity
In nr modem, there is a possible system crash due to improper input validation.
CVE-2025-69279Mar 9, 2026Unisoc
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
7.5 High severity
In nr modem, there is a possible system crash due to improper input validation.
CVE-2025-69278Mar 9, 2026Unisoc
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
7.5 High severity
In nr modem, there is a possible system crash due to improper input validation.
CVE-2025-61616Mar 9, 2026Unisoc
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
7.5 High severity
In nr modem, there is a possible system crash due to improper input validation.
CVE-2025-61615Mar 9, 2026Unisoc
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
7.5 High severity
In nr modem, there is a possible system crash due to improper input validation.
CVE-2025-61614Mar 9, 2026Unisoc
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
7.5 High severity
In nr modem, there is a possible system crash due to improper input validation.
CVE-2025-61613Mar 9, 2026Unisoc
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
7.5 High severity
In nr modem, there is a possible system crash due to improper input validation.
CVE-2025-61612Mar 9, 2026Unisoc
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
9.8 Critical severity
SC9863A/T310/T610/T618/T606/T612/T616/T760/T770…: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2022-38696Sep 1, 2025Unisoc
In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges.
7.8 High severity
SC9863A/T310/T610/T618/T606/T612/T616/T760/T770…: Execution with Unnecessary Privileges
CVE-2022-38695Sep 1, 2025Unisoc
In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed.
7.8 High severity
SC9863A//T310/T610/T618/: Execution with Unnecessary Privileges
CVE-2022-38694Sep 1, 2025Unisoc
In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed.
9.8 Critical severity
SC9863A/T310/T610/T618/T606/T612/T616/T760/T770…: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2022-38692Sep 1, 2025Unisoc
In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges.
7.8 High severity
SC9863A//T310/T610/T618/: Execution with Unnecessary Privileges
CVE-2022-38691Sep 1, 2025Unisoc
In BootROM, there is a possible missing validation for Certificate Type 0. This could lead to local escalation of privilege with no additional execution privileges needed.
8.4 High severity
SC9863A/T606/T612/T616/T750/T765/T760/T770/T820…: Improper Neutralization of Special Elements used in a Command
CVE-2025-31710Jun 3, 2025Unisoc
In engineermode service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Out-of-bounds Write
CVE-2023-52351Apr 8, 2024Unisoc
In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
7.5 High severity
T760/T770/T820/S8000: Uncaught Exception
CVE-2023-52342Apr 8, 2024Unisoc
In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed
7.5 High severity
T760/T770/T820/S8000: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2023-52341Apr 8, 2024Unisoc
In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42748Dec 4, 2023Unisoc
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42747Dec 4, 2023Unisoc
In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42746Dec 4, 2023Unisoc
In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42745Dec 4, 2023Unisoc
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42743Dec 4, 2023Unisoc
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42740Dec 4, 2023Unisoc
In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42739Dec 4, 2023Unisoc
In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42738Dec 4, 2023Unisoc
In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42736Dec 4, 2023Unisoc
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.5 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Exposure of Resource to Wrong Sphere
CVE-2023-42717Dec 4, 2023Unisoc
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
7.5 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Exposure of Resource to Wrong Sphere
CVE-2023-42716Dec 4, 2023Unisoc
In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42696Dec 4, 2023Unisoc
In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42695Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42694Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42693Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42692Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42691Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42690Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42689Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42688Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42687Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42686Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
7.8 High severity
SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T61…: Missing Authorization
CVE-2023-42685Dec 4, 2023Unisoc
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed