SSD Secure Disclosure

VoLTE Video Call Vulnerability Grants Kernel Access on Unisoc Android Chips

Researchers from SSD Secure Disclosure have disclosed a two-stage attack chain that achieves remote kernel access on Android devices powered by Unisoc chipsets. The exploit begins with a remote code execution flaw in the modem firmware that is triggered by a specially crafted VoLTE video call. Once code executes on the modem, a second privilege-escalation issue abuses shared physical memory between the modem and application processor to reach Android kernel memory. The attack requires an attacker-controlled 4G network and VoLTE infrastructure, and the victim must answer the incoming video call. Vulnerable chip families include T606, T612 and T7250, found in devices such as the Motorola E13, Realme C33 and Xiaomi Redmi A5. No patch or CVE identifier has been issued by Unisoc, and the August Android security bulletin does not address the issue.