Unisoc VoLTE Call Chain Yields Full Android Kernel Access, Still Unpatched
SSD Secure Disclosure published a two-stage chain turning a VoLTE video call into full Android kernel access on Unisoc modem devices. The privilege escalation abuses shared modem/application-processor memory with no hardware boundary, and Unisoc has neither patched nor responded. Attackers must control a rogue 4G network and the victim must answer the call.