Vulnerability details
CVE-2026-66086
Unisoc (Shanghai) Technologies Modem
Stack-based Buffer Overflow in Modem
CVSS 3.1
8.3High
Official description
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.3High | 3.1 | CVEProject cvelistV5 (CNA) (Unisoc) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Unisoc (Shanghai) Technologies Co., Ltd. | Modem | T8100 | CVEProject cvelistV5 (CNA) |
| Unisoc (Shanghai) Technologies Co., Ltd. | Modem | T9100 | CVEProject cvelistV5 (CNA) |
| Unisoc (Shanghai) Technologies Co., Ltd. | Modem | UDX710 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-10-12
- Last updated
- 2026-10-15
- State
- Published
- Assigner (CNA)
- Unisoc
Exploit prediction (EPSS)
0.45%
Probability of exploitation in 30 days
39.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-121