Cyber Resilience

CVE-2025-61614

High

Published: 09 March 2026

Published
09 March 2026
Modified
09 March 2026
KEV Added
Patch
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0007 22.0th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-61614 is a high-severity Improper Input Validation (CWE-20) vulnerability in Google Android. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 22.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2025-61614 is a vulnerability in the nr modem component, stemming from improper input validation (CWE-20). This flaw can cause a system crash, affecting devices that incorporate the nr modem, such as those using Unisoc chipsets. The issue was published on 2026-03-09 with a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity primarily due to its impact on availability.

The vulnerability enables a remote denial-of-service attack with no additional execution privileges required. Attackers can exploit it over the network with low complexity and no user interaction, triggering a system crash that disrupts service without compromising confidentiality or integrity.

Unisoc has published an advisory at https://www.unisoc.com/en/support/announcement/2030931350138310657, which provides details on the issue relevant to mitigation efforts for affected products.

EU & UK References

Vulnerability details

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Improper input validation leads to remote system crash, directly enabling Endpoint DoS via application/system exploitation.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-69278Same product: Google Android
CVE-2025-61612Same product: Google Android
CVE-2025-61616Same product: Google Android
CVE-2025-61613Same product: Google Android
CVE-2025-69279Same product: Google Android
CVE-2025-61615Same product: Google Android
CVE-2025-71256Same product: Google Android
CVE-2025-71254Same product: Google Android
CVE-2025-71255Same product: Google Android
CVE-2025-71251Same product: Google Android

Affected Assets

google
android
13.0, 14.0, 15.0, 16.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly enforces comprehensive input validation in the nr modem to prevent system crashes from malformed network inputs due to improper validation.

prevent

Implements denial-of-service protections to limit or block remote attacks exploiting the nr modem's input validation flaw, mitigating availability impacts.

prevent

Requires timely flaw remediation through patching the nr modem vulnerability as detailed in the Unisoc advisory, preventing exploitation.

References