HIGH 7.6 NVD

CVE-2026-80335

In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. T

In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.

References

https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937

Published: 2026-11-04 · Source: NVD · Feed updated: 2026-11-04

This high severity vulnerability with a CVSS score of 7.6 was published on 2026-11-04 via NVD.

vulnfeed aggregates 18348 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.