BaseFortify

Publication date: 2025-12-01

Last updated on: 2025-12-02

Assigner: Unisoc

Description

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-01

Last Modified

2025-12-02

Generated

2026-07-06

AI Q&A

2025-12-01

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61607

EUVD

EUVD-2025-199964

Affected Vendors & Products

Vendor	Product	Version / Range
google	android	13.0
google	android	14.0
google	android	15.0
google	android	16.0
unisoc	t8100	*
unisoc	t8200	*
unisoc	t8300	*
unisoc	t9100	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Executive Summary

This vulnerability in the NR modem is caused by improper input validation, which can lead to a system crash. An attacker can remotely exploit this flaw to cause a denial of service (DoS) without needing any special privileges or user interaction. [1]

Impact Analysis

The vulnerability can cause your device's NR modem subsystem to crash remotely, resulting in a denial of service. This means your device may lose network connectivity or functionality temporarily, but the attacker does not gain access to sensitive data or control beyond causing the crash. [1]

Hi! I’m here to help you understand CVE-2025-61607. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70