The flaw is an out-of-bounds read in the IMS component of Unisoc SoCs caused by a missing bounds check. This bug (CWE‑125) allows a remote attacker to trigger a denial of service without any privilege escalation; the read can cause a crash or abnormal reset, disrupting device operation.

Unisoc (Shanghai) Technologies devices that incorporate the SC7731E, SC9832E, SC9863A, T310, T610, T618, T7200, T7225, T7250, T7255, T7280, T7300, T8100, T9100, T8200, and T8300 families are vulnerable. Firmware or SoC version details are not specified, so all current releases of these product families should be considered at risk until a vendor fix is released.

The CVSS score of 7.5 indicates high severity, while the EPSS score of less than 1% shows a low but non-zero probability of exploitation. The vulnerability is not listed in CISA KEV, and the only explicit attack vector mentioned is remote denial of service, implying a remote exploitation of the IMS service without privilege escalation.