Cyber Resilience

CVE-2025-61612

High

Published: 09 March 2026

Published
09 March 2026
Modified
09 March 2026
KEV Added
Patch
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0007 22.0th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-61612 is a high-severity Improper Input Validation (CWE-20) vulnerability in Google Android. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 22.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-11 (Error Handling).

Deeper analysis

CVE-2025-61612 is a vulnerability in the nr modem stemming from improper input validation, mapped to CWE-20. This flaw can trigger a system crash and affects nr modems developed by Unisoc, as detailed in the vendor's announcement.

A remote attacker requires no privileges, authentication, or user interaction to exploit this over the network with low attack complexity. Successful exploitation results in a denial of service, specifically a system crash with high availability impact but no confidentiality or integrity effects, earning a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Mitigation guidance is available in the Unisoc support announcement at https://www.unisoc.com/en/support/announcement/2030931350138310657.

EU & UK References

Vulnerability details

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Improper input validation (CWE-20) in the nr modem directly enables remote unauthenticated exploitation that crashes the system, matching Application or System Exploitation for Endpoint Denial of Service.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-69278Same product: Google Android
CVE-2025-61614Same product: Google Android
CVE-2025-61616Same product: Google Android
CVE-2025-61613Same product: Google Android
CVE-2025-69279Same product: Google Android
CVE-2025-61615Same product: Google Android
CVE-2025-71256Same product: Google Android
CVE-2025-71254Same product: Google Android
CVE-2025-71255Same product: Google Android
CVE-2025-71251Same product: Google Android

Affected Assets

google
android
13.0, 14.0, 15.0, 16.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly enforces comprehensive input validation in the NR modem to prevent system crashes from malformed network inputs as described in this CVE.

prevent

Ensures timely identification, reporting, and patching of the specific improper input validation flaw in the Unisoc NR modem firmware.

prevent

Implements secure error handling to avoid system crashes when invalid inputs reach the NR modem despite partial validation.

References