Search

Find a vulnerability

Search criteria

    4 vulnerabilities found for Modem by Unisoc (Shanghai) Technologies Co., Ltd.

    CVE-2026-66086 (GCVE-0-2026-66086)

    Vulnerability from nvd – Published: 2026-10-12 01:28 – Updated: 2026-10-12 01:28
    VLAI
    Title
    Stack-based Buffer Overflow in Modem
    Summary
    In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
    Severity
    8.3 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    CWE
    Assigner
    Unisoc CNA under the mitre root
    CNA scorecard D 52/100 over 18 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Unisoc (Shanghai) Technologies Co., Ltd. Modem Affected: T8100
    Affected: T9100
    Affected: UDX710
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Modem",
          "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "T8100"
            },
            {
              "status": "affected",
              "version": "T9100"
            },
            {
              "status": "affected",
              "version": "UDX710"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T01:28:35.334Z",
        "orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3",
        "shortName": "Unisoc"
      },
      "references": [
        {
          "url": "https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641"
        }
      ],
      "title": "Stack-based Buffer Overflow in Modem"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3",
    "assignerShortName": "Unisoc",
    "cveId": "CVE-2026-66086",
    "datePublished": "2026-10-12T01:28:35.334Z",
    "dateReserved": "2026-07-24T02:05:12.603Z",
    "dateUpdated": "2026-10-12T01:28:35.334Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-66085 (GCVE-0-2026-66085)

    Vulnerability from nvd – Published: 2026-10-12 01:28 – Updated: 2026-10-12 01:28
    VLAI
    Title
    Information Disclosure in Modem
    Summary
    In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.
    Severity
    5.5 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    CWE
    Assigner
    Unisoc CNA under the mitre root
    CNA scorecard D 52/100 over 18 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Unisoc (Shanghai) Technologies Co., Ltd. Modem Affected: T8100
    Affected: T9100
    Affected: T8300
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Modem",
          "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "T8100"
            },
            {
              "status": "affected",
              "version": "T9100"
            },
            {
              "status": "affected",
              "version": "T8300"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T01:28:27.895Z",
        "orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3",
        "shortName": "Unisoc"
      },
      "references": [
        {
          "url": "https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641"
        }
      ],
      "title": "Information Disclosure in Modem"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3",
    "assignerShortName": "Unisoc",
    "cveId": "CVE-2026-66085",
    "datePublished": "2026-10-12T01:28:27.895Z",
    "dateReserved": "2026-07-24T02:05:12.603Z",
    "dateUpdated": "2026-10-12T01:28:27.895Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-66086 (GCVE-0-2026-66086)

    Vulnerability from cvelistv5 – Published: 2026-10-12 01:28 – Updated: 2026-10-12 01:28
    VLAI
    Title
    Stack-based Buffer Overflow in Modem
    Summary
    In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
    Severity
    8.3 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    CWE
    Assigner
    Unisoc CNA under the mitre root
    CNA scorecard D 52/100 over 18 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Unisoc (Shanghai) Technologies Co., Ltd. Modem Affected: T8100
    Affected: T9100
    Affected: UDX710
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Modem",
          "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "T8100"
            },
            {
              "status": "affected",
              "version": "T9100"
            },
            {
              "status": "affected",
              "version": "UDX710"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T01:28:35.334Z",
        "orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3",
        "shortName": "Unisoc"
      },
      "references": [
        {
          "url": "https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641"
        }
      ],
      "title": "Stack-based Buffer Overflow in Modem"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3",
    "assignerShortName": "Unisoc",
    "cveId": "CVE-2026-66086",
    "datePublished": "2026-10-12T01:28:35.334Z",
    "dateReserved": "2026-07-24T02:05:12.603Z",
    "dateUpdated": "2026-10-12T01:28:35.334Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-66085 (GCVE-0-2026-66085)

    Vulnerability from cvelistv5 – Published: 2026-10-12 01:28 – Updated: 2026-10-12 01:28
    VLAI
    Title
    Information Disclosure in Modem
    Summary
    In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.
    Severity
    5.5 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    CWE
    Assigner
    Unisoc CNA under the mitre root
    CNA scorecard D 52/100 over 18 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Unisoc (Shanghai) Technologies Co., Ltd. Modem Affected: T8100
    Affected: T9100
    Affected: T8300
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Modem",
          "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "T8100"
            },
            {
              "status": "affected",
              "version": "T9100"
            },
            {
              "status": "affected",
              "version": "T8300"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-12T01:28:27.895Z",
        "orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3",
        "shortName": "Unisoc"
      },
      "references": [
        {
          "url": "https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641"
        }
      ],
      "title": "Information Disclosure in Modem"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3",
    "assignerShortName": "Unisoc",
    "cveId": "CVE-2026-66085",
    "datePublished": "2026-10-12T01:28:27.895Z",
    "dateReserved": "2026-07-24T02:05:12.603Z",
    "dateUpdated": "2026-10-12T01:28:27.895Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}