Critical Exploit Chain for Unisoc VoLTE Video Calls Disclosed

Security researchers have revealed a two-stage exploit chain that allows full Android kernel access on devices using Unisoc modem firmware via a VoLTE video call. The vulnerability, classified as CWE-1189, requires an attacker to control a private 4G network and the victim to answer the call. No fix has been released for this critical flaw, which affects multiple Unisoc chipsets in devices from Motorola, Realme, and Xiaomi, posing a significant security risk to users.