BaseFortify

Publication date: 2025-12-01

Last updated on: 2025-12-02

Assigner: Unisoc

Description

In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-01

Last Modified

2025-12-02

Generated

2026-07-06

AI Q&A

2025-12-01

EPSS Evaluated

2026-07-05

NVD

CVE-2025-3012

EUVD

EUVD-2025-199968

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	13.0
google	android	14.0
google	android	15.0
google	android	16.0
unisoc	t8100	*
unisoc	t8200	*
unisoc	t8300	*
unisoc	t9100	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Executive Summary

This vulnerability in the dpc modem is caused by a null pointer dereference, which can lead to a system crash. An attacker can remotely trigger this crash, causing a denial of service (DoS) without needing any additional execution privileges.

Impact Analysis

The vulnerability can cause a remote denial of service by crashing the modem subsystem. This means an attacker could disrupt device functionality remotely, causing service interruptions without gaining access to sensitive data or elevated privileges.

Hi! I’m here to help you understand CVE-2025-3012. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70