# Unisoc vulnerabilities

Source: https://junglewise.ai/threats/vendors/unisoc  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/unisoc.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 13 vulnerabilities in Unisoc: 0 in the last 7 days and 6 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-80335, was published on 4 November 2026. 6 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0. 16 technologies have a page of their own.

## Counts

- Last 7 days: 0
- Last 30 days: 3
- Last 90 days: 6
- All time: 13 (2 critical, 0 exploited in the wild)

## About Unisoc

A semiconductor company that designs and manufactures chipsets for mobile communications and IoT devices.

## Latest Unisoc vulnerabilities

- [CVE-2026-80335: Unisoc bootloader out-of-bounds write in firmware update](https://junglewise.ai/threats/cve-2026-80335-in-the-bootloader-download-module-there-is-a-possible-out-of) (high, CVSS 7.6, published 4 Nov 2026)
- [CVE-2026-79405: Unisoc modem firmware input validation DoS](https://junglewise.ai/threats/cve-2026-79405-in-modem-firmware-there-is-a-possible-system-crash-due-to) (high, CVSS 7.5, published 4 Nov 2026)
- [CVE-2026-121803: Unisoc UFS firmware out-of-bounds write in FFU](https://junglewise.ai/threats/cve-2026-121803-in-ufs-field-firmware-update-ffu-functionality-there-is-a) (critical, CVSS 9.3, published 4 Nov 2026)
- [CVE-2026-87765: Unisoc kernel apsys DVFS out-of-bounds read](https://junglewise.ai/threats/cve-2026-87765-in-the-kernel-apsys-dvfs-driver-there-is-a-possible-out-of-bounds) (medium, CVSS 5.5, published 12 Oct 2026)
- [CVE-2026-66086: Unisoc modem OTA stack buffer overflow in SIB1 message handling](https://junglewise.ai/threats/cve-2026-66086-in-the-modem-ota-stack-there-is-a-possible-stack-based-buffer) (critical, CVSS 9.8, published 12 Oct 2026)
- [CVE-2026-66085: Unisoc modem information disclosure in crash dumps](https://junglewise.ai/threats/cve-2026-66085-in-modem-there-is-a-possible-information-disclosure-due-to) (medium, CVSS 5.5, published 12 Oct 2026)
- [CVE-2026-4967: Unisoc IMS out of bounds read in modem firmware](https://junglewise.ai/threats/cve-2026-4967-unisoc-ims-out-of-bounds-read-in-modem-firmware) (high, CVSS 7.5, published 3 Jul 2026)
- [CVE-2025-71256: Unisoc NR modem improper input validation in T8000/T9000 series chipsets](https://junglewise.ai/threats/cve-2025-71256-unisoc-nr-modem-improper-input-validation-in-t8000-t9000-series) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71255: Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71255-unisoc-modem-ims-improper-input-validation-denial-of-service) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71254: Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71254-unisoc-modem-ims-improper-input-validation-denial-of-service) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71253: Unisoc Modem IMS improper input validation remote DoS](https://junglewise.ai/threats/cve-2025-71253-unisoc-modem-ims-improper-input-validation-remote-dos) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71252: Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71252-unisoc-modem-ims-improper-input-validation-denial-of-service) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71251: Unisoc Modem improper input validation in IMS](https://junglewise.ai/threats/cve-2025-71251-unisoc-modem-improper-input-validation-in-ims) (high, CVSS 7.5, published 6 May 2026)

## Most severe Unisoc vulnerabilities

- [CVE-2026-66086: Unisoc modem OTA stack buffer overflow in SIB1 message handling](https://junglewise.ai/threats/cve-2026-66086-in-the-modem-ota-stack-there-is-a-possible-stack-based-buffer) (critical, CVSS 9.8, published 12 Oct 2026)
- [CVE-2026-121803: Unisoc UFS firmware out-of-bounds write in FFU](https://junglewise.ai/threats/cve-2026-121803-in-ufs-field-firmware-update-ffu-functionality-there-is-a) (critical, CVSS 9.3, published 4 Nov 2026)
- [CVE-2026-80335: Unisoc bootloader out-of-bounds write in firmware update](https://junglewise.ai/threats/cve-2026-80335-in-the-bootloader-download-module-there-is-a-possible-out-of) (high, CVSS 7.6, published 4 Nov 2026)
- [CVE-2025-71253: Unisoc Modem IMS improper input validation remote DoS](https://junglewise.ai/threats/cve-2025-71253-unisoc-modem-ims-improper-input-validation-remote-dos) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71256: Unisoc NR modem improper input validation in T8000/T9000 series chipsets](https://junglewise.ai/threats/cve-2025-71256-unisoc-nr-modem-improper-input-validation-in-t8000-t9000-series) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71255: Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71255-unisoc-modem-ims-improper-input-validation-denial-of-service) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71254: Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71254-unisoc-modem-ims-improper-input-validation-denial-of-service) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71252: Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71252-unisoc-modem-ims-improper-input-validation-denial-of-service) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2025-71251: Unisoc Modem improper input validation in IMS](https://junglewise.ai/threats/cve-2025-71251-unisoc-modem-improper-input-validation-in-ims) (high, CVSS 7.5, published 6 May 2026)
- [CVE-2026-79405: Unisoc modem firmware input validation DoS](https://junglewise.ai/threats/cve-2026-79405-in-modem-firmware-there-is-a-possible-system-crash-due-to) (high, CVSS 7.5, published 4 Nov 2026)

## Vulnerabilities per week

6 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 3 | 1 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 3 | 1 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Unisoc technologies

- [Unisoc T8100](https://junglewise.ai/threats/technologies/t8100): 9 vulnerabilities
- [Unisoc T8200](https://junglewise.ai/threats/technologies/t8200): 9 vulnerabilities
- [Unisoc T8300](https://junglewise.ai/threats/technologies/t8300): 9 vulnerabilities
- [Unisoc T9100](https://junglewise.ai/threats/technologies/t9100): 9 vulnerabilities
- [Unisoc Sc7731e](https://junglewise.ai/threats/technologies/sc7731e): 8 vulnerabilities
- [Unisoc Sc9832e](https://junglewise.ai/threats/technologies/sc9832e): 8 vulnerabilities
- [Unisoc Sc9863a](https://junglewise.ai/threats/technologies/sc9863a): 8 vulnerabilities
- [Unisoc T310](https://junglewise.ai/threats/technologies/t310): 8 vulnerabilities
- [Unisoc T610](https://junglewise.ai/threats/technologies/t610): 8 vulnerabilities
- [Unisoc T618](https://junglewise.ai/threats/technologies/t618): 8 vulnerabilities
- [Unisoc T7200](https://junglewise.ai/threats/technologies/t7200): 8 vulnerabilities
- [Unisoc T7225](https://junglewise.ai/threats/technologies/t7225): 8 vulnerabilities
- [Unisoc T7250](https://junglewise.ai/threats/technologies/t7250): 8 vulnerabilities
- [Unisoc T7255](https://junglewise.ai/threats/technologies/t7255): 8 vulnerabilities
- [Unisoc T7280](https://junglewise.ai/threats/technologies/t7280): 8 vulnerabilities
- [Unisoc T7300](https://junglewise.ai/threats/technologies/t7300): 8 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Unisoc vulnerabilities", https://junglewise.ai/threats/vendors/unisoc, 12 November 2026.
