Out-of-Bounds Write Vulnerability in Unisoc Bootloader Download Module

CVE-2026-80335

What is CVE-2026-80335?

The bootloader download module from Unisoc exhibits a vulnerability where a failure to reset a global offset variable during firmware updates may cause out-of-bounds writes. This flaw can potentially lead to heap memory corruption, resulting in system crashes or the execution of arbitrary code without requiring additional execution privileges. Users of affected products should assess their systems for security implications and apply necessary mitigations.

References