Unisoc (Shanghai) Technologies Co., Ltd. has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 5.5 (medium), with 1 rated critical. Most affected products: Modem (2), kernel (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-66086Critical· 9.8In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages54CVE-2026-87765Medium· 5.5In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index30CVE-2026-66085Medium· 5.5In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps30
Unisoc (Shanghai) Technologies Co., Ltd. vulnerabilities
CVEs affecting Unisoc (Shanghai) Technologies Co., Ltd., newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-87765Medium· 5.5In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index
In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privil…
CVE-2026-66086Critical· 9.8In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution pri…
CVE-2026-66085Medium· 5.5In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps
In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.