Unisoc Modem Firmware Vulnerability Allows Full Android Kernel Access via VoLTE Video Call, No Fix Available

Security researchers at SSD Secure Disclosure have revealed a two-stage exploit chain that grants full Android kernel access on devices using Unisoc modem firmware through a VoLTE video call. The vulnerability, classified as CWE-1189 (Improper Isolation of Shared Resources on System-on-a-Chip), affects chipsets like the T606, T612, and T7250 found in devices from Motorola, Realme, and Xiaomi. The exploit requires an attacker to control a private 4G cellular network and the victim to answer the call. Despite attempts to contact Unisoc, no fix has been provided, and the August 2026 Android Security Bulletin does not address this flaw.