总结
- 严重程度 CVES
- High CVE-2025-31718,CVE-2025-31717
细节
- CVE ID CVE-2025-31718
- 标题 Improper Input Validation in modem
- 漏洞描述
In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed.
- 技术领域 Modem
- 漏洞类型 CWE-20 Improper Input Validation
- 攻击途径 Network
- CVSS 等级 High
- CVSS 分数 7.5
- CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- 影响芯片*
T606/T612/T616/T750/T765/T760/T770/T820/S8000/T8300/T9300
- 影响软件版本
Android13/Android14/Android15/Android16
- CVE ID CVE-2025-31717
- 标题 Improper Input Validation in modem
- 漏洞描述
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
- 技术领域 Modem
- 漏洞类型 CWE-20 Improper Input Validation
- 攻击途径 Network
- CVSS 等级 High
- CVSS 分数 7.5
- CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- 影响芯片*
T750/T765/T760/T770/T820/S8000/T8300/T9300
- 影响软件版本
Android13/Android14/Android15/Android16
*受影响芯片组列表可能不完整。如需了解最新信息,OEM可直接访问 https://unisupport.unisoc.com
漏洞类型定义
- 缩写 释义
- RCE Remote Code Execution
- EoP Elevation of Privilege
- ID Information Disclosure
- DoS Denial of Service
- N/A Classification not available
版本