Critical Security Flaw Found in Unisoc Chip-Powered Android Phones
Key Takeaways
- Affects approximately 11% of Android users with Unisoc 4G and 5G chipsets
- Vulnerability rated 9.4 out of 10 in severity, allowing remote access via SMS
- Fix scheduled for future Android security patch, users should update when available
Research from Check Point has revealed a major security vulnerability affecting smartphones equipped with Unisoc system-on-chip solutions. This flaw, located in the modem firmware, impacts both 4G and 5G handsets and could enable attackers to remotely access devices using SMS messages or radio packets.
Unisoc chipsets have grown in popularity for their cost-effectiveness in budget and mid-range smartphones, now holding an 11% global market share. The discovered weakness, labeled CVE-2022-20210, was initially identified on a Motorola Moto G20 with the Unisoc T700 chipset, running the January 2022 security patch. Check Point rates the vulnerability as critical at 9.4 out of 10.
Google has confirmed that a fix will be incorporated into a future Android security update. Until then, there are no immediate actions users can take besides ensuring they install the patch once it becomes available. The vulnerability was found while examining message handlers in the Non-Access Stratum layer.
