15
CVEs
0
Critical
15
High
0
KEV
0
PoC
15
Unpatched C/H
0.0%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
15
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (3)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-4967 | Remote denial of service in the IMS (IP Multimedia Subsystem) implementation of Unisoc mobile chipsets allows an unauthenticated remote attacker to crash the affected component via an out-of-bounds read triggered by a missing bounds check. The flaw spans a broad range of Unisoc SoCs (SC7731E, SC9832E, SC9863A, T310/T610/T618, T7200-series, T8100/T8200/T8300, T9100) commonly used in budget Android smartphones. It carries CVSS 7.5 with availability-only impact and no confidentiality or integrity effect; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21548 | Improper input validation in Unisoc's NR (5G New Radio) modem component affects T8100, T9100, T8200, and T8300 chipsets, enabling remote denial-of-service against devices incorporating these baseband processors. The modem's failure to validate incoming data can be triggered remotely, causing an availability impact classified as High - effectively crashing or disrupting the modem subsystem. No public exploit code has been identified at time of analysis, and the vulnerability was disclosed by Unisoc via their product security bulletin. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21549 | Remote denial of service in Unisoc modem firmware affects T8100, T9100, T8200, and T8300 chipsets through improper input validation. An unauthenticated remote attacker can send crafted network input to the modem component, causing an availability failure - effectively cutting off cellular connectivity on affected devices. No public exploit has been identified at time of analysis, and no KEV listing exists, but the CVSS:3.1/AV:N/AC:L/PR:N/UI:N profile means no preconditions limit the attacker's reach against any device using these chipsets. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21550 | Remote denial of service in the Unisoc modem component of T8100, T9100, T8200, and T8300 chipsets allows unauthenticated network-adjacent or remote attackers to crash the modem by sending malformed input, severing cellular connectivity on affected devices. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H vector confirms no privileges or user interaction are required, and the attack surface is the baseband network interface. No public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21551 | Remote denial of service in Unisoc modem firmware affects T8100, T9100, T8200, and T8300 chipsets due to improper input validation in the modem stack. Unauthenticated remote attackers can crash or render the modem unresponsive - severing cellular connectivity on affected devices - without requiring any privileges or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, though the network-accessible, zero-complexity attack path represents a meaningful availability risk for devices dependent on continuous cellular communication. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21552 | Remote denial of service in the modem firmware of Unisoc T8100, T9100, T8200, and T8300 chipsets allows an unauthenticated remote attacker to crash the modem subsystem by sending crafted cellular signaling data, disabling cellular connectivity on affected devices. The CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) reflects full availability impact with no victim-side prerequisites, though practical exploitation requires the attacker to control or simulate cellular network infrastructure in radio proximity. No public exploit has been identified at time of analysis, and this vulnerability has not been added to the CISA KEV catalog. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21553 | Remote denial of service in Unisoc T8100/T9100/T8200/T8300 modem firmware allows unauthenticated remote attackers to crash or render the modem inoperable through crafted network input. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) confirms exploitation requires no authentication, no user interaction, and low complexity, making any exposed device potentially reachable. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low barrier to exploitation warrants prompt firmware patching. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21554 | Remote denial of service in the Unisoc UDX710 modem allows unauthenticated remote attackers to crash or disable modem functionality by sending crafted network input that bypasses input validation in the baseband stack. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication, no user interaction, and no elevated privileges - only network-reachable access to the modem. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21555 | Remote denial of service in the Unisoc UDX710 modem allows a network-adjacent or remote attacker to crash the modem subsystem of affected devices by sending malformed or crafted input that bypasses input validation. The vulnerability requires no authentication and no user interaction, per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector. Impact is limited to availability - there is no confidentiality or integrity exposure - but a successful attack would disrupt cellular connectivity on the affected device. No public exploit code and no CISA KEV listing have been identified at time of analysis. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2025-71256 | Remote denial of service in Unisoc T8100/T9100/T8200/T8300 chipset NR modem implementations allows unauthenticated network attackers to crash device cellular connectivity via malformed protocol input. The improper input validation in the 5G New Radio modem stack enables trivial remote service disruption requiring no user interaction or authentication. EPSS data not available; no evidence of active exploitation (not in CISA KEV). Affects mobile devices using these specific Unisoc chipset models in 5G NR mode. | HIGH | 7.5 | 0.1% | 38 |
No patch
|
| CVE-2025-71251 | Remote attackers can crash Unisoc chipset IMS (IP Multimedia Subsystem) implementations through network-accessible malformed input, causing complete denial of service with no authentication required. Affects 17 Unisoc chipset models (SC7731E, SC9832E, SC9863A, T-series T310 through T8300) used in mobile devices. CVSS 7.5 (High) reflects direct network exposure and ease of exploitation (AV:N/AC:L/PR:N), though impact is limited to availability. No public exploit code identified at time of analysis, and EPSS data not available for assessment. | HIGH | 7.5 | 0.1% | 38 |
No patch
|
| CVE-2025-71252 | Remote denial of service in Unisoc Modem IMS stack allows unauthenticated network attackers to crash mobile devices through improper input validation. Affects 16 Unisoc chipset families (SC7731E through T8300) widely deployed in budget smartphones and IoT devices across global markets. No authentication, user interaction, or elevated privileges required for exploitation. EPSS data and KEV status not available; no public exploit identified at time of analysis. | HIGH | 7.5 | 0.1% | 38 |
No patch
|
| CVE-2025-71253 | Remote denial of service in Unisoc modem IMS stack allows network attackers to crash affected devices through malformed input without authentication. Affects 16 Unisoc chipset families (SC7731E, SC9832E, SC9863A, T-series T310 through T8300) used in mobile devices. No authentication, user interaction, or special configuration required (CVSS AV:N/AC:L/PR:N/UI:N). No public exploit code or CISA KEV listing identified at time of analysis, though EPSS data unavailable for risk quantification. | HIGH | 7.5 | 0.1% | 38 |
No patch
|
| CVE-2025-71254 | Remote denial of service in Unisoc modem IMS (IP Multimedia Subsystem) implementation allows unauthenticated network attackers to crash telephony services on affected chipsets through malformed input. Affects 16 Unisoc chipset models spanning SC and T series (SC7731E through T8300) used in budget and mid-range mobile devices. No public exploit identified at time of analysis. CVSS 7.5 (High) reflects network accessibility and service disruption potential, though EPSS data unavailable for risk prioritization. | HIGH | 7.5 | 0.1% | 38 |
No patch
|
| CVE-2025-71255 | Remote denial of service in Unisoc modem IMS implementation across 16 chipset families (SC7731E through T8300) allows unauthenticated network attackers to crash mobile device modem services via crafted IMS traffic. The improper input validation vulnerability (CVSS 7.5) enables high-impact availability attacks against millions of deployed Android smartphones and IoT devices using Unisoc chipsets. No public exploit identified at time of analysis, with EPSS data unavailable for this recently disclosed January 2025 vulnerability. | HIGH | 7.5 | 0.1% | 38 |
No patch
|