Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access
Unisoc modem firmware exploit chain grants full Android kernel access via VoLTE video call.
Security researchers have detailed a two-stage exploit chain targeting Unisoc modem firmware, enabling full Android kernel access through a VoLTE video call. The attack requires control of a private 4G network and the victim to answer the call. Unisoc has not yet provided a fix, leaving devices vulnerable.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Unisoc?
Get an email when a new story names Unisoc, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA two-stage exploit chain targeting Unisoc modem firmware allows attackers who control a rogue 4G network to gain full Android kernel access simply by having the victim answer a VoLTE video call. The root cause lies in unpatched vulnerabilities within the modem's firmware attack surface, which is particularly dangerous because it sits at a privileged layer below the operating system. With no fix yet available from Unisoc, millions of devices using this chipset remain exposed to a highly impactful, low-user-interaction attack. This case highlights the critical risk posed by firmware-level vulnerabilities in mobile chipsets, which are often slower to patch than OS-level software and affect a broad ecosystem of device manufacturers.
What helps against this
How we list vendors- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2025-31718