Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Unisoc modem firmware VoLTE privilege-escalation flaw (CWE-1189)

Vulnerability
First reported
Last updated
Happening score
H score 28
1 unique sources, 1 articles

Summary

Hide ▲

Researchers published a CWE-1189 privilege-escalation flaw in Unisoc modem firmware that can elevate modem-level access to full Android kernel control through a VoLTE video call. The issue affects shared firmware across at least T606, T612, and T7250 chipsets used in devices such as the Motorola E13, Realme C33, and Xiaomi Redmi A5. No CVE had been assigned and no patch or vendor mitigation was available at publication. The chain requires attacker-controlled private 4G infrastructure and a victim who answers the incoming call.

Timeline

  1. 17.08.2026 13:52 2 articles · 3h ago

    SSD Secure Disclosure publishes Unisoc VoLTE exploit chain that reaches the Android kernel

    Technical Analysis Update

    Security researchers at SSD Secure Disclosure published a two-stage exploit chain against Unisoc modem firmware that can escalate from modem code execution to full Android kernel access through a VoLTE video call when an attacker controls private 4G infrastructure and the victim answers the call. The flaw is classified as CWE-1189, no CVE identifier had been assigned, and the same firmware is shared across at least three Unisoc chipsets used in the Motorola E13, Realme C33, and Xiaomi Redmi A5. Researchers confirmed kernel-level code execution on a test device by observing kernel log output, and no patch or mitigation was available at publication.

    Show sources
    Open in new tab