Threat database

CVE-2026-66086 is a high-severity stack-based buffer overflow vulnerability in the modem OTA stack of Unisoc (Shanghai) Technologies Co., Ltd. modems. It arises from improper validation of scheduling information in SIB1 messages. Exploitation could allow remote code execution or denial of service without requiring additional privileges.

A vulnerability in Unisoc (Shanghai) Technologies Co., Ltd. modem products T8100, T9100, and T8300 allows local information disclosure due to missing filtering of sensitive data in crash dumps. This issue does not require additional execution privileges and has a medium severity rating with a CVSS score of 5.5.

CVE-2026-87765 is a medium severity vulnerability in the Unisoc kernel apsys DVFS driver caused by improper input validation of the frequency index. This flaw can lead to out-of-bounds reads or hardware register corruption, potentially causing system instability or denial of service when exploited with local privileges.

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

CVE-2026-21553 is a high-severity vulnerability in the modems of Unisoc (Shanghai) Technologies Co., Ltd. models T8100, T9100, T8200, and T8300. It involves improper input validation that could allow a remote attacker to cause a denial of service without requiring any privileges or user interaction.

CVE-2026-21552 is a high-severity vulnerability in the modem components of Unisoc (Shanghai) Technologies Co., Ltd. products T8100, T9100, T8200, and T8300. It involves improper input validation that could allow a remote attacker to cause a denial of service without requiring any privileges or user interaction.

CVE-2026-21551 is a high-severity vulnerability in the modem components of Unisoc (Shanghai) Technologies Co., Ltd. products T8100, T9100, T8200, and T8300. The issue arises from improper input validation, which could allow a remote attacker to cause a denial of service without requiring any additional execution privileges. No information about patches or fixes is currently available.

CVE-2026-21550 is a high-severity vulnerability in the modem components of Unisoc (Shanghai) Technologies Co., Ltd. products T8100, T9100, T8200, and T8300. It involves improper input validation that could allow a remote attacker to cause a denial of service without requiring any additional execution privileges. No information about patches or fixes is currently available.

CVE-2026-21549 is a high-severity vulnerability in Unisoc (Shanghai) Technologies Co., Ltd. modem products T8100, T9100, T8200, and T8300. It involves improper input validation that could lead to a remote denial of service (DoS) without requiring any additional execution privileges. No confidentiality or integrity impact is indicated. No patch or official remediation guidance is currently available.

CVE-2026-21548 is a high-severity vulnerability in Unisoc (Shanghai) Technologies Co., Ltd. modem products T8100, T9100, T8200, and T8300. It involves improper input validation in the NR modem component, which could allow a remote attacker to cause a denial of service without requiring user interaction or privileges. The vulnerability does not impact confidentiality or integrity but can disrupt availability by causing a system crash or reboot.

In IMS, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed.

CVE-2025-71256 is a high-severity vulnerability in the NR modem components of Unisoc (Shanghai) Technologies Co. , Ltd. T8100, T9100, T8200, and T8300 chipsets. The issue stems from improper input validation, which can be exploited remotely to cause a denial of service without requiring any user interaction or additional privileges. This vulnerability affects devices running Android versions 13 through 16. No official patch or remediation has been documented yet, and there are no known exploits in the wild at this time.

CVE-2025-71255 is a high-severity vulnerability in the modem IMS component of various Unisoc (Shanghai) Technologies chipsets. It involves improper input validation that could allow a remote denial of service without requiring any privileges or user interaction. The affected products include multiple Unisoc chipsets running Android versions 13 through 16. No patch or official remediation has been confirmed yet, and there are no known exploits in the wild at this time.

CVE-2025-71254 is a high-severity vulnerability in the modem IMS component of various Unisoc (Shanghai) Technologies chipsets running Android versions 13 through 16. The issue stems from improper input validation, which can be exploited remotely to cause a denial of service without requiring any privileges or user interaction. No confidentiality or integrity impacts are reported. There is no information about an available patch or official remediation at this time.

CVE-2025-71253 is a high-severity vulnerability in the modem IMS component of various Unisoc (Shanghai) Technologies chipsets affecting multiple Android versions from 13 to 16. The issue arises from improper input validation, which could allow a remote attacker to cause a denial of service without requiring any privileges or user interaction. There is no indication of impact on confidentiality or integrity, only availability. No official patch or remediation guidance has been provided yet, and no known exploits are reported in the wild. Users of affected devices should monitor vendor advisories for updates.

CVE-2025-71252 is a high-severity vulnerability in the modem IMS component of various Unisoc (Shanghai) Technologies chipsets running Android versions 13 through 16. It involves improper input validation that could allow a remote attacker to cause a denial of service without requiring any privileges or user interaction. No information about available patches or official remediation has been provided. There are no known exploits in the wild at this time.

CVE-2025-71251 is a high-severity vulnerability in Unisoc (Shanghai) Technologies Co. , Ltd.products involving improper input validation in the IMS component. This flaw can cause a system crash leading to a remote denial of service without requiring any privileges or user interaction. It affects multiple Unisoc chipsets running Android versions 13 through 16. No patch or official remediation guidance is currently available, and no known exploits have been reported in the wild.

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.