# CVE-2026-80335: Unisoc bootloader out-of-bounds write in firmware update

Source: https://junglewise.ai/threats/cve-2026-80335-in-the-bootloader-download-module-there-is-a-possible-out-of  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-04. Updated: 2026-11-04  
License: CC BY 4.0 with a link back

CVE-2026-80335 · Severity: high · CVSS 7.6 · Published 2026-11-04

Unisoc chipsets used in mobile devices contain a flaw in their bootloader that can corrupt memory during firmware updates. An attacker with physical access to a device can exploit this to crash the system or potentially execute arbitrary code, compromising the entire device.

Technologies: [Unisoc Sc7731e](https://junglewise.ai/threats/technologies/sc7731e), [Unisoc Sc9832e](https://junglewise.ai/threats/technologies/sc9832e), [Unisoc Sc9863a](https://junglewise.ai/threats/technologies/sc9863a), [Unisoc T310](https://junglewise.ai/threats/technologies/t310), [Unisoc T610](https://junglewise.ai/threats/technologies/t610), [Unisoc T618](https://junglewise.ai/threats/technologies/t618), [Unisoc T7200](https://junglewise.ai/threats/technologies/t7200), [Unisoc T7225](https://junglewise.ai/threats/technologies/t7225), [Unisoc T7250](https://junglewise.ai/threats/technologies/t7250), [Unisoc T7255](https://junglewise.ai/threats/technologies/t7255), [Unisoc T7280](https://junglewise.ai/threats/technologies/t7280), [Unisoc T7300](https://junglewise.ai/threats/technologies/t7300), [Unisoc T8100](https://junglewise.ai/threats/technologies/t8100), [Unisoc T8200](https://junglewise.ai/threats/technologies/t8200), [Unisoc T8300](https://junglewise.ai/threats/technologies/t8300), [Unisoc T9100](https://junglewise.ai/threats/technologies/t9100). Vendors: [Unisoc](https://junglewise.ai/threats/vendors/unisoc).

## Quick answers

**Is CVE-2026-80335 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-80335 being exploited in the wild.

**How severe is CVE-2026-80335?** High severity, with a CVSS score of 7.6, published 4 November 2026.

**Which products and versions are affected?** Unisoc SC9863A; Unisoc SC9832E; Unisoc SC7731E; Unisoc T310; and 12 more.

**Is there a fix for CVE-2026-80335?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-80335 attacked?** It is attacked with physical access, in device firmware.

**Am I affected by CVE-2026-80335?** Check whether you run Unisoc Sc7731e, Unisoc Sc9832e, Unisoc Sc9863a or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A failure to reset a global offset variable in the bootloader download module causes an out-of-bounds write to heap memory during firmware update sessions (CWE-787). The vulnerability requires physical access to the device; a successful exploit results in heap corruption, denial of service, or code execution with bootloader-level privileges.

## Affected products

- Unisoc SC9863A
- Unisoc SC9832E
- Unisoc SC7731E
- Unisoc T310
- Unisoc T610
- Unisoc T618
- Unisoc T7200
- Unisoc T7225
- Unisoc T7250
- Unisoc T7255
- Unisoc T7280
- Unisoc T8100
- Unisoc T9100
- Unisoc T8200
- Unisoc T7300
- Unisoc T8300

## Timeline

- 2026-11-04: disclosed

## References

- [https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937](https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937)

## Related threats

- [Unisoc UFS firmware out-of-bounds write in FFU](https://junglewise.ai/threats/cve-2026-121803-in-ufs-field-firmware-update-ffu-functionality-there-is-a)
- [Unisoc NR modem improper input validation in T8000/T9000 series chipsets](https://junglewise.ai/threats/cve-2025-71256-unisoc-nr-modem-improper-input-validation-in-t8000-t9000-series)
- [Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71255-unisoc-modem-ims-improper-input-validation-denial-of-service)
- [Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71254-unisoc-modem-ims-improper-input-validation-denial-of-service)
- [Unisoc Modem IMS improper input validation remote DoS](https://junglewise.ai/threats/cve-2025-71253-unisoc-modem-ims-improper-input-validation-remote-dos)