{"affected":[{"defaultStatus":"unaffected","product":"Bootloader","source":"CNA: Unisoc","vendor":"Unisoc (Shanghai) Technologies Co., Ltd.","versions":[{"status":"affected","version":"SC9863A"},{"status":"affected","version":"SC9832E"},{"status":"affected","version":"SC7731E"},{"status":"affected","version":"T310"},{"status":"affected","version":"T610"},{"status":"affected","version":"T618"},{"status":"affected","version":"T7200"},{"status":"affected","version":"T7225"},{"status":"affected","version":"T7250"},{"status":"affected","version":"T7255"},{"status":"affected","version":"T7280"},{"status":"affected","version":"T8100"},{"status":"affected","version":"T9100"},{"status":"affected","version":"T8200"},{"status":"affected","version":"T7300"},{"status":"affected","version":"T8300"}]}],"cveId":"CVE-2026-80335","cwes":["CWE-787"],"description":"In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.","epss":{"date":"2026-11-04","percentile":0.18661,"score":0.00266},"exploits":[],"kev":null,"metrics":[{"score":8.4,"severity":"high","source":"CNA: Unisoc","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},{"score":7.6,"severity":"high","source":"NVD: security@unisoc.com","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793809073180,"publishedAt":1793762453265,"references":[{"source":"CNA: Unisoc","tags":[],"url":"https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937"},{"source":"security@unisoc.com","tags":[],"url":"https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937"}],"remediation":[],"revision":"0d8a7c128cce992c2e55e0c19e6e4c6bc5581e84c871bcbff25019b18e99c9ee","sources":[{"modifiedAt":1793805537306,"name":"CNA: Unisoc","retrievedAt":1793808688139,"url":"https://www.cve.org/CVERecord?id=CVE-2026-80335"},{"modifiedAt":1793809073180,"name":"NVD","retrievedAt":1793816671832,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80335"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793808690815,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-80335"}],"ssvc":{"assessedAt":1793804019348,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Out-of-bounds Write in Bootloader","updatedAt":1793816671832}