Security
A record of the vulnerabilities we have fixed on our devices, including the ones the chip vendor never fixed.
A flaw in Unisoc's kernel DVFS driver lets a privileged local process crash the device. Unisoc lists the T7200, the current name of the chip in OhrTech devices. We fixed it, along with a related flaw we found in the same driver.
A flaw in how Unisoc's modem firmware validates network input can be triggered remotely, with no user interaction. Unisoc lists the T606 as affected. OhrTech devices now ship modem firmware that includes the fix.
Two out-of-bounds writes in Unisoc's tee service can crash it. Unisoc lists the T606 as affected. OhrTech devices were never vulnerable: we replaced Unisoc's TEE and its services with Trusty.
Two out-of-bounds writes in Unisoc's trusty service can crash it. Unisoc lists the T606 as affected. OhrTech devices were never vulnerable: we replaced Unisoc's TEE and its services with Trusty.
A stack buffer overflow in the DRM trustlet of Unisoc's TrustZone software allows code execution inside the TEE. Unisoc lists the T606 as affected. OhrTech devices were never vulnerable: they do not run Unisoc's TEE.
Two published flaws in Unisoc modem firmware let a video call run code on the modem and then take over the Android kernel. Unisoc has not responded and there is no vendor fix. We patched the modem ourselves, made sure it cannot change the kernel's code, and hardened the interface between them.
Google's October 2026 Android Security Bulletin fixes 25 vulnerabilities in Android's framework and system code, including four critical Bluetooth issues. We applied the fixes on October 8, 2026, and every Foundation OS release since includes them. There is no known exploitation.
If you have found a security issue in an OhrTech device or in this site, please tell us. Reports go straight to engineering.