CVE-2026-80335
Out-of-bounds Write in Bootloader
CVSS Score
8.4
EPSS Score
0.0%
EPSS Percentile
0th
In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.
| CWE | CWE-787 |
| Vendor | unisoc (shanghai) technologies co., ltd. |
| Product | bootloader |
| Published | Nov 4, 2026 |
| Last Updated | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for unisoc (shanghai) technologies co., ltd. bootloader
Be the first to know when new high vulnerabilities affecting unisoc (shanghai) technologies co., ltd. bootloader are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Unisoc (Shanghai) Technologies Co., Ltd. / Bootloader
SC9863A SC9832E SC7731E T310 T610 T618 T7200 T7225 T7250 T7255 T7280 T8100 T9100 T8200 T7300 T8300