PatchSiren

Unisoc (Shanghai) Technologies Co., Ltd. CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Unisoc (Shanghai) Technologies Co., Ltd. CVE published 2026-10-12

CVE-2026-66085

A possible information disclosure due to missing filtering of sensitive data in crash dumps was reported in a modem. This could lead to local information disclosure with no additional execution privileges needed. The CVSS score is 5.5, and the severity is MEDIUM. The vulnerability affects modem components, leading to potential information disclosure. Defenders should verify the presence of this vulnerabil [truncated]

MEDIUM Unisoc (Shanghai) Technologies Co., Ltd. CVE published 2026-10-12

CVE-2026-87765

A possible out-of-bounds read or hardware register corruption issue was found in the kernel apsys DVFS driver due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges. The issue was identified in the kernel apsys DVFS driver, which is responsible for managing dynamic voltage and frequency scaling. The vulnerability has a medi [truncated]

HIGH Unisoc (Shanghai) Technologies Co., Ltd. CVE published 2026-08-03

CVE-2026-21552

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-03T08:17:19.903Z and has not been modified since then. The CVE-2026-21552 vulnerability is related to improper input validation in the modem, which could potentially lead to a remote denial of service. The CVSS score for this vulnerability is 7.5, indicating a high severity. Affected product informa [truncated]

HIGH Unisoc (Shanghai) Technologies Co., Ltd. CVE published 2026-08-03

CVE-2026-21548

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-03T08:17:19.393Z and has not been modified since then. The CVE-2026-21548 vulnerability is related to a possible improper input validation in the nr modem. This could potentially lead to a remote denial of service with System execution privileges needed. The CVSS score for this vulnerability is 7.5, [truncated]