CVE-2026-4967 PUBLISHED

Assigner: Unisoc
Reserved: 27.03.2026 Published: 03.07.2026 Updated: 03.07.2026

In IMS, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 7.5

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Unisoc (Shanghai) Technologies Co., Ltd.
Product	SC7731E/SC9832E/SC9863A/T310/T610/T618/T7200/T7225/T7250/T7255/T7280/T7300/T8100/T9100/T8200/T8300
Versions	Default: unaffected Version Android13/Android14/Android15/Android16 is affected

References

https://www.unisoc.com/en/support/product-security-bulletin/2072920457676509185

Problem Types

CWE-121 Stack-based Buffer Overflow CWE