Unisoc Bootloader memory corruption in firmware update handling
Boot programs in phones and devices using Unisoc chips can be broken into.
Summary
Missing bounds checks in Download mode let firmware update data corrupt memory. The affected chips are Unisoc models; the vendor's name appears in the record but no device makers are named.
Affected when
- Download mode available
What to do
Update these devices now.
- Unisoc SC9863A
- Unisoc SC9832E
- Unisoc SC7731E
- Unisoc T310
- Unisoc T610
- Unisoc T618
- Unisoc T7200
- Unisoc T7225
- Unisoc T7250
- Unisoc T7255
- Unisoc T7280
- Unisoc T8100
- Unisoc T9100
- Unisoc T8200
- Unisoc T7300
- Unisoc T8300
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen