Cyber Resilience

CVE-2025-69279

High

Published: 09 March 2026

Published
09 March 2026
Modified
09 March 2026
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0023 46.2th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-69279 is a high-severity Improper Input Validation (CWE-20) vulnerability in Google Android. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 46.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2025-69279 is a vulnerability in the NR modem component involving improper input validation (CWE-20), which can cause a system crash. Published on 2026-03-09, it has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and affects Unisoc NR modems.

A remote attacker can exploit this vulnerability over the network with low attack complexity, requiring no privileges or user interaction. Successful exploitation leads to a denial of service through system crash, with no additional execution privileges needed.

Unisoc has issued an announcement detailing the issue at https://www.unisoc.com/en/support/announcement/2030931350138310657.

EU & UK References

Vulnerability details

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.

CWE(s)
NVD-CWE-noinfoCWE-20

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
attack.mitre.org →
Why these techniques?

Improper input validation in network-exposed NR modem component directly enables remote unauthenticated exploitation leading to system crash (Endpoint DoS via application/system exploitation).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-61616Same product: Google Android
CVE-2025-61613Same product: Google Android
CVE-2025-61615Same product: Google Android
CVE-2025-69278Same product: Google Android
CVE-2025-61614Same product: Google Android
CVE-2025-61612Same product: Google Android
CVE-2025-71256Same product: Google Android
CVE-2025-71254Same product: Google Android
CVE-2025-71255Same product: Google Android
CVE-2025-71251Same product: Google Android

Affected Assets

google
android
13.0, 14.0, 15.0, 16.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-10 Information Input Validation good match
prevent

Directly mandates validation of information inputs to prevent system crashes from improper input validation in the NR modem.

SC-5 Denial-of-service Protection good match
prevent

Protects against or limits the effects of remote denial-of-service events like the network-triggered system crash.

SI-2 Flaw Remediation good match
prevent

Requires timely identification, reporting, and correction of the specific flaw causing the NR modem crash.

References