Unisoc modem flaw lets hackers hijack Android via video call

RESEARCHERS have identified a new security exploit in Unisoc T612 modem firmware that combines two vulnerabilities to potentially give attackers privileged access to Android devices. The exploit involves delivering a malicious payload via an existing remote code execution (RCE) vulnerability, followed by the victim answering a video call. The attack was demonstrated using a Realme C33 running affected firmware, and SSD Secure Disclosure confirmed that the exploit could affect other devices as well. This discovery underscores the continuing threats posed by cellular modem vulnerabilities.