~ / search / CVE-2026-80335

CVE-2026-80335

Out-of-bounds Write in Bootloader

State: published CNA: Unisoc CVSS 3.1 8.4 High NVD: received

Description

In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.

Affected products

VendorProductVersions
Unisoc (Shanghai) Technologies Co., Ltd. Bootloader SC9863A; SC9832E; SC7731E; T310; T610; T618; T7200; T7225; T7250; T7255; T7280; T8100; …

References

External links from the record. They lead to third-party sites.