UNISOC Modem Flaw Enables Remote Code Execution via Video Calls

A UNISOC modem firmware vulnerability allows modem-level code to disable Memory Protection Unit (MPU) protections and access physical memory used by the Android kernel, enabling escalation to kernel-level arbitrary code execution. SSD Secure Disclosure (credited to researcher 0x50594d) demonstrated a full exploit chain—including a VoLTE-triggered final stage—tested on a Realme C33 and listed affected devices (e.g., Xiaomi Redmi A5, Motorola E13); no UNISOC firmware update has been reported, leaving vendor and handset firmware updates as the primary remediation path.