August 17, 2026
- Unisoc T612 full chain: VoLTE video call → baseband RCE → kernel LPE. SSD Secure Disclosure released the second stage of a chain first disclosed in March 2026, combining remote code execution in the Unisoc modem with an architectural memory-isolation flaw to pivot from the baseband to full Android kernel control — triggered simply by getting a victim to answer a video call, with no fix from the chipset maker (SSD Disclosure, The Hacker News, Dark Reading). · Vulnerabilities & Exploits
in One Video Call to Kernel: Unisoc Baseband Chain Gives Full Android Takeover