Security

What we have fixed, and when

A dated record of the vulnerabilities we have fixed on our devices, including the ones the chip vendor never fixed.

Bulletins

Oct 17, 2026OHR-2026-005

Unisoc modem input validation flaw (CVE-2025-31718): fixed

A flaw in how Unisoc's modem firmware validates network input can be triggered remotely, with no user interaction. Unisoc lists the T606 as affected. OhrTech devices now ship modem firmware that includes the fix.

HighFixedCVE-2025-31718

Oct 17, 2026OHR-2026-004

Unisoc tee service out-of-bounds writes (CVE-2022-48373, CVE-2022-48374): not affected

Two out-of-bounds writes in Unisoc's tee service can crash it. Unisoc lists the T606 as affected. OhrTech devices were never vulnerable: we replaced Unisoc's TEE and its services with Trusty.

MediumNot affectedCVE-2022-48373CVE-2022-48374

Oct 17, 2026OHR-2026-003

Unisoc trusty service out-of-bounds writes (CVE-2024-39427, CVE-2024-39428): not affected

Two out-of-bounds writes in Unisoc's trusty service can crash it. Unisoc lists the T606 as affected. OhrTech devices were never vulnerable: we replaced Unisoc's TEE and its services with Trusty.

MediumNot affectedCVE-2024-39427CVE-2024-39428

Oct 17, 2026OHR-2026-002

Unisoc TEE DRM trustlet buffer overflow (CVE-2023-33913): not affected

A stack buffer overflow in the DRM trustlet of Unisoc's TrustZone software allows code execution inside the TEE. Unisoc lists the T606 as affected. OhrTech devices were never vulnerable: they do not run Unisoc's TEE.

HighNot affectedCVE-2023-33913

Oct 17, 2026OHR-2026-001

Unisoc VoLTE video call exploit: patched by OhrTech, no vendor fix

Two published flaws in Unisoc modem firmware let a video call run code on the modem and then take over the Android kernel. Unisoc has not responded and there is no vendor fix. We patched the modem ourselves, made sure it cannot change the kernel's code, and hardened the interface between them.

CriticalFixed

Subscribe via RSS

How we handle security

Critical fixes within one week on the standard build, and within two weeks where a customer's system carries significant customization.
Delivered over the air to devices already in the field. Customers approve every update; nothing is forced.
Verified before it runs. Every piece of software on the device is checked against our key at boot. An update that fails to start rolls back on its own.
Published here. Each fix gets a dated entry on this page and in the RSS feed.

Reporting a vulnerability

If you have found a security issue in an OhrTech device or in this site, please tell us. Reports go straight to engineering.