Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Security researchers have discovered a two-stage exploit chain that can give attackers full access to the Android kernel on devices using Unisoc modem firmware. The exploit chain is initiated through a VoLTE video call. This vulnerability was disclosed by SSD Secure Disclosure, with the second stage being published recently. The first stage of the exploit chain was disclosed in March 2026 and involved remote code execution. The chipset maker has not yet provided a fix for this issue. The exploit allows attackers to gain full kernel access on affected Android devices.