UNISOC Modem Flaw Enables Remote Code Execution via Video Calls

A UNISOC modem flaw allows attackers to achieve kernel-level remote code execution through malicious video calls on affected devices.

UNISOC, whose modems are widely deployed in Android smartphones, has a flaw that enables kernel-level code execution triggered via video calls. Successful exploitation would give an attacker deep control over affected handsets. No exploitation activity is mentioned in the report.

• Flaw resides in the modem and leads to kernel-level code execution
• Attack vector is video calls, enabling remote triggering
• UNISOC modems are broadly used in Android devices worldwide
• No in-the-wild exploitation reported yet