| CVE-2026-66086
| MOModem Unisoc (Shanghai) Technologies Co., Ltd. | 9.8 | | Oct 12 | Stack-based Buffer Overflow in Modem |
| CVE-2026-66085
| MOModem Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 12 | Information Disclosure in Modem |
| CVE-2026-87765
| KEkernel Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 12 | Improper Input Validation in Kernel APsys DVFS |
| CVE-2026-21555
| UDUDX710 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Aug 3 | In modem, there is a possible improper input validation |
| CVE-2026-21554
| UDUDX710 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Aug 3 | In modem, there is a possible improper input validation |
| CVE-2026-21553
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Aug 3 | In modem, there is a possible improper input validation |
| CVE-2026-21552
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Aug 3 | In modem, there is a possible improper input validation |
| CVE-2026-21551
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Aug 3 | In modem, there is a possible improper input validation |
| CVE-2026-21550
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Aug 3 | In modem, there is a possible improper input validation |
| CVE-2026-21549
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Aug 3 | In modem, there is a possible improper input validation |
| CVE-2026-21548
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Aug 3 | In nr modem, there is a possible improper input validation |
| CVE-2026-4967
| SCSC7731E/SC9832E/SC9863A/T310/T610/T618/T7200/T7225/T7250/T7255/T7280/T7300/T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Jul 3 | In IMS, there is a possible out of bounds read due to a missing bounds check |
| CVE-2025-71256
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | May 6 | In nr modem, there is a possible improper input validation |
| CVE-2025-71255
| SCSC7731E/SC9832E/SC9863A/T310/T610/T618/T7200/T7225/T7250/T7255/T7280/T7300/T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | May 6 | In Modem IMS, there is a possible improper input validation |
| CVE-2025-71254
| SCSC7731E/SC9832E/SC9863A/T310/T610/T618/T7200/T7225/T7250/T7255/T7280/T7300/T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | May 6 | In Modem IMS, there is a possible improper input validation |
| CVE-2025-71253
| SCSC7731E/SC9832E/SC9863A/T310/T610/T618/T7200/T7225/T7250/T7255/T7280/T7300/T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | May 6 | In Modem IMS, there is a possible improper input validation |
| CVE-2025-71252
| SCSC7731E/SC9832E/SC9863A/T310/T610/T618/T7200/T7225/T7250/T7255/T7280/T7300/T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | May 6 | In Modem IMS, there is a possible improper input validation |
| CVE-2025-71251
| SCSC7731E/SC9832E/SC9863A/T310/T610/T618/T7200/T7225/T7250/T7255/T7280/T7300/T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | May 6 | In IMS, there is a possible system crash due to improper input validation |
| CVE-2025-69279
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Mar 9 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-69278
| T7T7300/T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Mar 9 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61616
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Mar 9 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61615
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Mar 9 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61614
| T7T7300/T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Mar 9 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61613
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Mar 9 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61612
| T7T7300/T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Mar 9 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61611
| UDUDX710 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Mar 9 | In modem, there is a possible improper input validation |
| CVE-2025-61610
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61609
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In modem, there is a possible system crash due to improper input validation |
| CVE-2025-61608
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61607
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61619
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61618
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-61617
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-3012
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In dpc modem, there is a possible system crash due to null pointer dereference |
| CVE-2025-11133
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-11132
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-11131
| T8T8100/T9100/T8200/T8300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Dec 1 | In nr modem, there is a possible system crash due to improper input validation |
| CVE-2025-31719
| SCSC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000/T8300/T9300 Unisoc (Shanghai) Technologies Co., Ltd. | 5.1 | | Nov 11 | In TEE EcDSA algorithm, there is a possible memory consistency issue |
| CVE-2025-31718
| T6T606/T612/T616/T750/T765/T760/T770/T820/S8000/T8300/T9300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Oct 11 | In modem, there is a possible system crash due to improper input validation |
| CVE-2025-31717
| T7T750/T765/T760/T770/T820/S8000/T8300/T9300 Unisoc (Shanghai) Technologies Co., Ltd. | 7.5 | | Oct 11 | In modem, there is a possible system crash due to improper input validation |
| CVE-2022-38696
| SCSC9863A/T310/T610/T618/T606/T612/T616/T760/T770/T820/S8000/T750/T765 Unisoc (Shanghai) Technologies Co., Ltd. | 9.8 | | Sep 1 | In BootRom, there's a possible missing payload size check |
| CVE-2022-38695
| SCSC9863A/T310/T610/T618/T606/T612/T616/T760/T770/T820/S8000/ Unisoc (Shanghai) Technologies Co., Ltd. | 7.8 | | Sep 1 | In BootRom, there's a possible unchecked command index |
| CVE-2022-38694
| SCSC9863A//T310/T610/T618/ Unisoc (Shanghai) Technologies Co., Ltd. | 7.8 | | Sep 1 | In BootRom, there is a possible unchecked write address |
| CVE-2022-38693
| SCSC9863A//T310/T610/T618/T606/T612/T616/T760/T770/T820/S8000/T750/T765 Unisoc (Shanghai) Technologies Co., Ltd. | 9.8 | | Sep 1 | In FDL1, there is a possible missing payload size check |
| CVE-2022-38692
| SCSC9863A/T310/T610/T618/T606/T612/T616/T760/T770/T820/S8000/ Unisoc (Shanghai) Technologies Co., Ltd. | 9.8 | | Sep 1 | In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation |
| CVE-2022-38691
| SCSC9863A//T310/T610/T618/ Unisoc (Shanghai) Technologies Co., Ltd. | 7.8 | | Sep 1 | In BootROM, there is a possible missing validation for Certificate Type 0 |
| CVE-2025-31715
| SSSL8521E/SL8521ET/ SL8541E/UIS8141E/UWS6137/UWS6137E/UWS6151(E)/UWS6152 Unisoc (Shanghai) Technologies Co., Ltd. | 9.8 | | Aug 18 | In vowifi service, there is a possible command injection due to improper input validation |
| CVE-2025-31714
| SSSL8521E/SL8521ET/ SL8541E/UIS8141E/UWS6137/UWS6137E/UWS6151(E)/UWS6152 Unisoc (Shanghai) Technologies Co., Ltd. | 6.8 | | Aug 18 | In Developer Tools, there is a possible missing verification incorrect input |
| CVE-2025-31713
| SSSL8521E/SL8521ET/ SL8541E/UIS8141E/UWS6137/UWS6137E/UWS6151(E)/UWS6152 Unisoc (Shanghai) Technologies Co., Ltd. | 8.4 | | Aug 18 | In engineer mode service, there is a possible command injection due to improper input validation |
| CVE-2025-31716
| SCSC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.1 | | Aug 1 | In bootloader, there is a possible out of bounds write due to a missing bounds check |
| CVE-2022-39126
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check |
| CVE-2022-39125
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check |
| CVE-2022-39124
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check |
| CVE-2022-39123
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check |
| CVE-2022-39122
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check |
| CVE-2022-39121
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check |
| CVE-2022-39120
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check |
| CVE-2022-39117
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In messaging service, there is a missing permission check |
| CVE-2022-39115
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In Music service, there is a missing permission check |
| CVE-2022-39114
| SCSC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Unisoc (Shanghai) Technologies Co., Ltd. | 5.5 | | Oct 14 | In Music service, there is a missing permission check |