UNISOC VOLTE VIDEO CALL EXPLOIT CHAIN CAN GIVE ATTACKERS FULL ANDROID KERNEL ACCESS

Summary from the TLDR InfoSec newsletter

Researchers at SSD Secure Disclosure have detailed a two-stage exploit chain targeting Unisoc modem firmware that allows an attacker operating a malicious 4G network to achieve full Android kernel access when a victim answers a VoLTE video call. The exploit utilizes a preliminary remote code execution payload to overwrite the ARM Memory Protection Unit, successfully mapping the entire 32-bit physical address space as readable, writable, and executable from the modem context. Unisoc has not responded to the disclosure or issued a patch, so users of affected devices like the Motorola E13, Realme C33, and Xiaomi Redmi A5 remain highly vulnerable until manufacturers release custom firmware updates.