Cyber Resilience

CVE-2025-71252

High

Published: 06 May 2026

Published
06 May 2026
Modified
11 May 2026
KEV Added
Patch
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0007 21.1th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-71252 is a high-severity an unspecified weakness vulnerability in Google Android. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Endpoint Denial of Service (T1499); ranked at the 21.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2025-71252 is an improper input validation vulnerability in the Modem IMS component. This issue affects software or devices incorporating Modem IMS, as detailed in the Unisoc product security bulletin. The vulnerability carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), reflecting high severity due to its potential for significant availability impact.

The vulnerability enables a remote attacker to exploit it over the network with low attack complexity, requiring no authentication privileges or user interaction. Successful exploitation results in a denial of service condition on the affected Modem IMS, disrupting service availability without compromising confidentiality or integrity.

Mitigation guidance is available in the Unisoc product security bulletin at https://www.unisoc.com/en/support/product-security-bulletin/2051836844671422466.

EU & UK References

Vulnerability details

In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499 Endpoint Denial of Service Impact
Adversaries may perform Endpoint Denial of Service (DoS) attacks to degrade or block the availability of services to users.
Why these techniques?

Improper input validation enables remote service exhaustion/crash (DoS) on Modem IMS component, directly mapping to T1499 Endpoint Denial of Service.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-71254Same product: Google Android
CVE-2025-71255Same product: Google Android
CVE-2025-71251Same product: Google Android
CVE-2025-71253Same product: Google Android
CVE-2025-69278Same product: Google Android
CVE-2025-61614Same product: Google Android
CVE-2025-61612Same product: Google Android
CVE-2025-61616Same product: Google Android
CVE-2025-71256Same product: Google Android
CVE-2025-61613Same product: Google Android

Affected Assets

google
android
13.0, 14.0, 15.0, 16.0

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly requires validating all information inputs to the system, preventing exploitation of the improper input validation flaw in Modem IMS that leads to remote DoS.

prevent

Mandates timely identification, reporting, and remediation of flaws like CVE-2025-71252, applying patches from the Unisoc bulletin to eliminate the vulnerability.

prevent

Provides denial-of-service protection mechanisms that limit the impact of remote attacks exploiting the Modem IMS input validation flaw.

References