This vulnerability (CVE-2026-4967) involves a stack-based buffer overflow due to a missing bounds check in the IMS component of various Unisoc chipsets and devices. The flaw allows an attacker to trigger an out-of-bounds read remotely, resulting in a denial of service condition. The CVSS 3.1 base score is 7.5, reflecting high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). There is no vendor advisory or patch information available at this time.

An attacker can remotely cause a denial of service on affected Unisoc devices by exploiting the out-of-bounds read vulnerability. The vulnerability does not grant execution privileges or impact confidentiality or integrity, but it disrupts service availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations are provided in the available data.