Unisoc bootloader ODW in firmware update OOB due to global offset reset failure
CVE-2026-80335 Published on November 4, 2026
Out-of-bounds Write in Bootloader
In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.
Weakness Type
What is a Memory Corruption Vulnerability?
The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. The software may modify an index or perform pointer arithmetic that references a memory location that is outside of the boundaries of the buffer. A subsequent write operation then produces undefined or unexpected results.
CVE-2026-80335 has been classified to as a Memory Corruption vulnerability or weakness.
Products Associated with CVE-2026-80335
Want to know whenever a new CVE is published for Google Android? stack.watch will email you.
Affected Versions
Unisoc (Shanghai) Technologies Co., Ltd. Bootloader:- Version SC9863A is affected.
- Version SC9832E is affected.
- Version SC7731E is affected.
- Version T310 is affected.
- Version T610 is affected.
- Version T618 is affected.
- Version T7200 is affected.
- Version T7225 is affected.
- Version T7250 is affected.
- Version T7255 is affected.
- Version T7280 is affected.
- Version T8100 is affected.
- Version T9100 is affected.
- Version T8200 is affected.
- Version T7300 is affected.
- Version T8300 is affected.