Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Wed, 04 Nov 2026 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In UFS Field Firmware Update (FFU) functionality, there is a possible out-of-bounds write due to missing bounds checking on the PRDT table size. This could lead to local code execution or denial of service with no additional execution privileges needed. | This CVE ID is a duplicate of CVE-2026-80335 (VULN-002 dl_download_midst) and has been rejected. |
| Title | Out-of-bounds Write in UFS Firmware | |
| Metrics |
cvssV3_1
|
cvssV3_1
|
Wed, 04 Nov 2026 03:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In UFS Field Firmware Update (FFU) functionality, there is a possible out-of-bounds write due to missing bounds checking on the PRDT table size. This could lead to local code execution or denial of service with no additional execution privileges needed. | |
| Title | Out-of-bounds Write in UFS Firmware | |
| Weaknesses | CWE-787 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
Status: REJECTED
Assigner: Unisoc
Published:
Updated: 2026-11-04T04:03:54.837Z
Reserved: 2026-11-04T03:07:44.383Z
Link: CVE-2026-121803
No data.
Status : Received
Published: 2026-11-04T04:17:33.973
Modified: 2026-11-04T04:17:33.973
Link: CVE-2026-121803
No data.
OpenCVE Enrichment
No data.
-
CWE-787
Out-of-bounds Write