[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fS8_jrWY5505_WbRczVosxs84-DhiQ8F33IbWSYuKePw":3},{"article":4,"iocs":50,"watch_terms":55,"solutions":56,"lesson":141},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"dbcceda9-4c4a-42d1-9a35-ce5bca9f92cb","Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access","unisoc-volte-video-call-exploit-chain-can-give-attackers-full-android-kernel-acc-797946","Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call, with no fix from the chipset maker. The advisory, published August 17, 2026, is the second stage of a chain that began in March 2026, when SSD disclosed remote code execution in the","Security researchers have detailed a two-stage exploit chain targeting Unisoc modem firmware, enabling full Android kernel access through a VoLTE video call. The attack requires control of a private 4G network and the victim to answer the call. Unisoc has not yet provided a fix, leaving devices vulnerable.","Unisoc modem firmware exploit chain grants full Android kernel access via VoLTE video call.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Funisoc-volte-video-call-exploit-chain.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiIqVuTpKFLy55ilEFObjJqUsVDu7qTrQCYAFsh7bbMcF4xv61h8I6tfue0tGw04yWGhDg_cZ-r0v9Jw-kjNmm5ZYpbebrvlgixiqID5pSUwXb8dQSg12cI5kFkR4BKK0mwc6rMP-9ULTHob-bi7rgfYxGBixmNhGy75tlqn5tlc6OXjpGGZemXbq0yHRY\u002Fs1600\u002Fandroid.jpg","2026-08-17T10:52:34+00:00","2026-08-17T14:00:19.092091+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"Unisoc","vendor",{"name":21,"type":22},"T606","product",{"name":24,"type":22},"T612",{"name":26,"type":22},"T7250",{"name":28,"type":22},"UIS7862A",{"name":30,"type":31},"VoLTE","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,45],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[51],{"type":52,"value":53,"context":54},"cve","CVE-2025-31718","Potentially related modem input-validation flaw on Unisoc chipset family.",[18,21,24],{"controls":57,"vendors":140},[58,86,112],{"slug":59,"name":60,"problem":61,"products":62},"patch-management","Automated patch management","Known holes get closed in days, not months.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":59,"product_name":83,"url":84,"description":85},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":87,"name":88,"problem":89,"products":90},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[91,99,104],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":100,"product_name":101,"url":102,"description":103},"defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"slug":49,"name":113,"problem":114,"products":115},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",[],{"slug":142,"title":143,"body":144,"framework_refs":145,"framework_notes":156},"unisoc-modem-exploit-chain-grants-full-android-kernel-access-via-volte-call","Unisoc Modem Exploit Chain Grants Full Android Kernel Access via VoLTE Call","A two-stage exploit chain targeting Unisoc modem firmware allows attackers who control a rogue 4G network to gain full Android kernel access simply by having the victim answer a VoLTE video call. The root cause lies in unpatched vulnerabilities within the modem's firmware attack surface, which is particularly dangerous because it sits at a privileged layer below the operating system. With no fix yet available from Unisoc, millions of devices using this chipset remain exposed to a highly impactful, low-user-interaction attack. This case highlights the critical risk posed by firmware-level vulnerabilities in mobile chipsets, which are often slower to patch than OS-level software and affect a broad ecosystem of device manufacturers.",[146,147,148,149,150,151,152,153,154,155],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 18: Penetration Testing","NIST SP 800-124: Guidelines for Managing the Security of Mobile Devices","NIST SP 800-193: Platform Firmware Resiliency Guidelines","NIST SI-2: Flaw Remediation","NIST SA-12: Supply Chain Protection","NIST SC-7: Boundary Protection","GSMA FS.40: Mobile Device Security Guidelines","ISO\u002FIEC 27001: A.12.6.1 Management of Technical Vulnerabilities",{}]