Live › vulnerability › CVE-2026-80335
A bootloader download module fails to reset a global offset variable during firmware update sessions, which can cause an out-of-bounds write into heap memory. An attacker may corrupt memory, crash the system, or run arbitrary code without extra privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 04:46 UTC. All times on this page are UTC.
Devices built on the listed Unisoc chipsets (budget phones, tablets, embedded and IoT devices). Unisoc rates the access vector as physical, so an attacker needs hands-on access (for example via the firmware download path) rather than network reach. Device makers get fixes from Unisoc and ship them; everyone else can skip it if their device does not use these chipsets.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Unisoc bootloader (download module) | vendor | chipsets SC9863A, SC9832E, SC7731E, T310, T610, T618, T7200, T7225, T7250, T7255, T7280, T8100, T9100, T8200, T7300, T8300 (list may be incomplete) | Android security patch level 2026-11-05 |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.
This page as .md · .json · in your agent: get_signal("CVE-2026-80335")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.