Critical Security Flaw in UNISOC Modems Enables Remote Code Execution via Video Calls

A security flaw in UNISOC modems allowed remote code execution at the kernel level via specially crafted video calls. The vulnerability was identified in UNISOC’s modem firmware, impacting devices using its chipsets, though no specific CVE ID or affected device models were disclosed. Exploitation required no user interaction, enabling attackers to execute arbitrary code with elevated privileges. The issue was reported by security researchers, but no exact disclosure date or patch timeline was provided. The flaw posed risks of device compromise, data theft, or further network infiltration. No confirmed attacks exploiting this vulnerability were mentioned.