Patch Ticker

Unisoc Bootloader memory corruption in firmware update handling

Boot programs in phones and devices using Unisoc chips can be broken into.

Summary

Missing bounds checks in Download mode let firmware update data corrupt memory. The affected chips are Unisoc models; the vendor's name appears in the record but no device makers are named.

Affected when

  • Download mode available

What to do

Update these devices now.

  • Unisoc SC9863A
  • Unisoc SC9832E
  • Unisoc SC7731E
  • Unisoc T310
  • Unisoc T610
  • Unisoc T618
  • Unisoc T7200
  • Unisoc T7225
  • Unisoc T7250
  • Unisoc T7255
  • Unisoc T7280
  • Unisoc T8100
  • Unisoc T9100
  • Unisoc T8200
  • Unisoc T7300
  • Unisoc T8300

Products and platforms

  • Bootloader

CVE IDs

Sources

Times

First published

First seen