CVE-2025-71254
Published: 06 May 2026
Summary
CVE-2025-71254 is a high-severity an unspecified weakness vulnerability in Google Android. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 21.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2025-71254 is an improper input validation vulnerability in Modem IMS. This flaw affects Unisoc products, as detailed in the vendor's security bulletin. Published on 2026-05-06, it enables a remote denial of service without requiring additional execution privileges and carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity due to its network accessibility, low attack complexity, and high impact on availability.
A remote, unauthenticated attacker can exploit this vulnerability over the network with no user interaction needed. Exploitation triggers a denial of service condition, disrupting service availability while leaving confidentiality and integrity unaffected.
Mitigation details are available in the Unisoc product security bulletin at https://www.unisoc.com/en/support/product-security-bulletin/2051836844671422466.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-209653
Vulnerability details
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Improper input validation in network-accessible Modem IMS component directly enables remote unauthenticated DoS via application/system exploitation (T1499.004).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly addresses the improper input validation vulnerability in Modem IMS by requiring comprehensive validation of network inputs to prevent denial of service.
Mitigates the remote denial of service impact by protecting against or limiting effects of network-based DoS attacks exploiting invalid inputs.
Ensures timely identification, reporting, and correction of the specific input validation flaw in Modem IMS through systematic flaw remediation.