CVE-2022-27250 is a critical vulnerability affecting UNISOC chipsets, allowing remote attackers to gain full control over mobile phones. With a CVSS score of 9.8, it presents a severe risk, enabling unauthorized access to sensitive data, device functionality, and environmental recording without user interaction. While no public exploit code or active exploitation has been confirmed, the vulnerability has garnered significant community discussion and media attention, indicating a high level of concern. Organizations utilizing UNISOC-powered devices should prioritize patching or mitigation strategies.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2022-03-15CPE matchmatch criteria | cpe:2.3:h:unisoc:unisoc_chipset:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.