{"id":"CVE-2026-80335","published":"2026-11-04T04:17:37.623","lastModified":"2026-11-04T04:17:37.623","description":"In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.","cvssScore":7.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}