CVE-2025-61616

Published Mar 9, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Weaknesses CWE-20
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Google
Google android
Unisoc
Unisoc t8100
Unisoc t8200
Unisoc t8300
Unisoc t9100
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:h:unisoc:t8100:-:*:*:*:*:*:*:*
cpe:2.3:h:unisoc:t8200:-:*:*:*:*:*:*:*
cpe:2.3:h:unisoc:t8300:-:*:*:*:*:*:*:*
cpe:2.3:h:unisoc:t9100:-:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*
Vendors & Products Google
Google android
Unisoc
Unisoc t8100
Unisoc t8200
Unisoc t8300
Unisoc t9100
Type Values Removed Values Added
Description In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Unisoc
Published
Updated
Mar 9, 2026, 8:03 PM
Reserved
Sep 28, 2025, 7:27 AM
Status
Modified
Published
Mar 9, 2026, 9:16 AM
Modified
Jun 17, 2026, 9:50 AM