# CVE-2026-87765: Unisoc kernel apsys DVFS out-of-bounds read

Source: https://junglewise.ai/threats/cve-2026-87765-in-the-kernel-apsys-dvfs-driver-there-is-a-possible-out-of-bounds  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-12. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-87765 · Severity: medium · CVSS 5.5 · Published 2026-10-12

A vulnerability in Unisoc chipset DVFS (Dynamic Voltage and Frequency Scaling) drivers could allow a local attacker to read memory outside intended bounds or corrupt hardware registers, leading to system crashes or denial of service. This affects multiple Unisoc chipsets used in mobile devices and other embedded systems.

Vendors: [Unisoc](https://junglewise.ai/threats/vendors/unisoc).

## Quick answers

**Is CVE-2026-87765 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-87765 being exploited in the wild.

**How severe is CVE-2026-87765?** Medium severity, with a CVSS score of 5.5, published 12 October 2026.

**Which products and versions are affected?** Unisoc T610 chipset; Unisoc T618 chipset; Unisoc T7200 chipset; Unisoc T7225 chipset; and 8 more.

**Is there a fix for CVE-2026-87765?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-87765 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2026-87765?** Check whether you run Unisoc T610 chipset, Unisoc T618 chipset, Unisoc T7200 chipset or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The kernel apsys DVFS driver fails to properly validate the frequency index parameter, allowing out-of-bounds read access or corruption of hardware registers. Exploitation requires local execution privileges but no user interaction. A successful exploit causes denial of service or system instability.

## Affected products

- Unisoc T610 chipset
- Unisoc T618 chipset
- Unisoc T7200 chipset
- Unisoc T7225 chipset
- Unisoc T7250 chipset
- Unisoc T7255 chipset
- Unisoc T7280 chipset
- Unisoc T8100 chipset
- Unisoc T9100 chipset
- Unisoc T8200 chipset
- Unisoc T7300 chipset
- Unisoc T8300 chipset

## Timeline

- 2026-10-12: disclosed

## References

- [https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641](https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641)

## Related threats

- [Unisoc NR modem improper input validation in T8000/T9000 series chipsets](https://junglewise.ai/threats/cve-2025-71256-unisoc-nr-modem-improper-input-validation-in-t8000-t9000-series)