CVE-2026-80335 PUBLISHED

Out-of-bounds Write in Bootloader

Assigner: Unisoc
Reserved: 26.08.2026 Published: 04.11.2026 Updated: 04.11.2026

In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 8.4

Attack Vector	Physical	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Unisoc (Shanghai) Technologies Co., Ltd.
Product	Bootloader
Versions	Default: unaffected Version SC9863A is affected Version SC9832E is affected Version SC7731E is affected Version T310 is affected Version T610 is affected Version T618 is affected Version T7200 is affected Version T7225 is affected Version T7250 is affected Version T7255 is affected Version T7280 is affected Version T8100 is affected Version T9100 is affected Version T8200 is affected Version T7300 is affected Version T8300 is affected

References

https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937

Problem Types

CWE-787 CWE