CVE-2026-87765
Received Received - Intake

Improper Input Validation in APSYS DVFS Driver

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: Unisoc

Description
In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-87765
EUVD
EUVD-2026-97140

Affected Vendors & Products

Showing 12 associated CPEs
Vendor Product Version / Range
Unisoc (Shanghai) Technologies Co., Ltd. kernel T610
Unisoc (Shanghai) Technologies Co., Ltd. kernel T618
Unisoc (Shanghai) Technologies Co., Ltd. kernel T7200
Unisoc (Shanghai) Technologies Co., Ltd. kernel T7225
Unisoc (Shanghai) Technologies Co., Ltd. kernel T7250
Unisoc (Shanghai) Technologies Co., Ltd. kernel T7255
Unisoc (Shanghai) Technologies Co., Ltd. kernel T7280
Unisoc (Shanghai) Technologies Co., Ltd. kernel T8100
Unisoc (Shanghai) Technologies Co., Ltd. kernel T9100
Unisoc (Shanghai) Technologies Co., Ltd. kernel T8200
Unisoc (Shanghai) Technologies Co., Ltd. kernel T7300
Unisoc (Shanghai) Technologies Co., Ltd. kernel T8300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the kernel apsys DVFS driver where improper input validation of the frequency index can cause an out-of-bounds read or hardware register corruption. This may lead to system instability or denial of service with local privileges.

Impact Analysis

An attacker with local access could exploit this to crash the system or cause instability, potentially leading to denial of service. It requires local privileges but does not need user interaction.

Compliance Impact

The vulnerability could lead to system instability or denial of service with local privileges, which may impact compliance with standards like GDPR or HIPAA by compromising data availability or integrity. However, specific compliance impacts are not detailed in the provided CVE information.

Mitigation Strategies

Update the kernel to the latest patched version provided by Unisoc. Disable the apsys DVFS driver if not required. Restrict local user privileges to minimize attack surface. Monitor system logs for unusual hardware register changes or instability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-87765. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart