---
id: "CVE-2026-80335"
kind: "vulnerability"
aliases: ["CVE-2026-80335"]
title: "Unisoc bootloader out-of-bounds write in firmware download module (CVE-2026-80335)"
severity: "high"
cvss: 7.6
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Unisoc bootloader (download module)", "fixed": ["Android security patch level 2026-11-05"], "affected": "chipsets SC9863A, SC9832E, SC7731E, T310, T610, T618, T7200, T7225, T7250, T7255, T7280, T8100, T9100, T8200, T7300, T8300 (list may be incomplete)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["android", "bootloader", "embedded", "firmware", "infrastructure", "physical-access", "unisoc"]
not_affected_if: ["non-unisoc-chipset"]
published_at: "2026-11-04T04:17:37+00:00"
first_seen_at: "2026-11-04T04:46:24+00:00"
updated_at: "2026-11-04T04:49:13+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80335", "first_seen_at": "2026-11-04T04:46:24+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-04T04:49:13+00:00"}]
---

# Unisoc bootloader out-of-bounds write in firmware download module (CVE-2026-80335)

A bootloader download module fails to reset a global offset variable during firmware update sessions, which can cause an out-of-bounds write into heap memory. An attacker may corrupt memory, crash the system, or run arbitrary code without extra privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Unisoc bootloader (download module) affected chipsets SC9863A, SC9832E, SC7731E, T310, T610, T618, T7200, T7225, T7250, T7255, T7280, T8100, T9100, T8200, T7300, T8300 (list may be incomplete) fixed Android security patch level 2026-11-05

## How to check

Find out if your device uses one of the affected Unisoc chipsets (SC9863A, SC9832E, SC7731E, T310, T610, T618, T7200, T7225, T7250, T7255, T7280, T8100, T9100, T8200, T7300, T8300); on Android check Settings > About phone > Security patch level is 2026-11-05 or later. Unisoc says the chipset list may be incomplete.

## Fix

Android devices: install security patch level 2026-11-05 or later (per Android bulletin entry on OSV). Other devices: get a firmware update from your device maker; Unisoc gives no fixed version.

## Timeline

- 2026-11-04T04:46:24+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-80335
- 2026-11-04T04:49:13+00:00 analyst — Unisoc bulletin (2026-11-01) names 16 affected chipsets, physical access vector, CVSS 8.4; no fix version in vendor page. OSV/Android entry ASB-A-553139427 lists SPL 2026-11-05 as fixed (secondary, not verified). Not exploited, no PoC found.

## Documents

- [advisory] Unisoc Product Security Bulletin (version 1.0, 2026-11-01) https://www.unisoc.com/en/support/product-security-bulletin/2117818023857520641
- [fix] OSV ASB-A-553139427 (Android bulletin entry for CVE-2026-80335) https://osv.dev/vulnerability/ASB-A-553139427

## From the sources

In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_