Unpatched VoLTE Flaw Gives Attackers Full Android Kernel Control Over 4G Calls
Security researchers have disclosed an exploit chain in Unisoc-based Android phones that uses a VoLTE video call over attacker‑controlled 4G infrastructure to gain full kernel access — with no patch yet available. The bug turns everyday cellular calls into a potential entry point for deep compromise, raising stakes for millions of budget and mid‑range device users and the networks that carry their traffic.
A newly disclosed security flaw in a popular mobile chipset line has turned a routine voice call into a potential route for total device takeover, and there is not yet a fix. Researchers have revealed a Voice over LTE (VoLTE) exploit chain affecting Android phones built on Unisoc modems that can give an attacker full access to the Android kernel — the core of the operating system that controls everything from app permissions to memory and hardware. The chain begins with a remote code execution (RCE) vulnerability in the modem itself and then allows malicious modem code to modify Android kernel memory, effectively handing an intruder the keys to the…
Pro features include
- 60+ analytical tools across markets and intelligence
- Custom alerts, watchlists, and AOI monitoring
- Daily Pro brief at 6 PM ET — 12 hours before free tier
- Conflict deep dives and premium research products