Out of Bound Write Vulnerability in Unisoc Bootloader
CVE-2025-31716

5.1MEDIUM

Key Information:

Vendor

Unisoc (shanghai) Technologies Co., Ltd.

Status
Sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t750/t765/t760/t770/t820/s8000
Vendor
CVE Published:
1 August 2025

What is CVE-2025-31716?

The Unisoc bootloader has a vulnerability that allows for an out of bounds write due to a missing bounds check. This flaw can result in a local denial of service, potentially disrupting the normal functioning of affected devices, while not requiring additional execution privileges. Prompt attention to this issue is crucial for maintaining system reliability and security.

Affected Version(s)

SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000 Android13/Android14/Android15

References

https://www.unisoc.com/en_us/secy/announcementDetail/1951...

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-31716 : Out of Bound Write Vulnerability in Unisoc Bootloader