总结

严重程度 CVES
High CVE-2025-61610,CVE-2025-61609,CVE-2025-61608,CVE-2025-61607,CVE-2025-61619,CVE-2025-61618,CVE-2025-61617,CVE-2025-3012,CVE-2025-11133,CVE-2025-11132,CVE-2025-11131

细节

CVE ID CVE-2025-61610
标题 Improper Input Validation in nr modem
漏洞描述
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-61609
标题 Improper Input Validation in modem
漏洞描述
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-61608
标题 Improper Input Validation in nr modem
漏洞描述
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-61607
标题 Improper Input Validation in nr modem
漏洞描述
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-61619
标题 Improper Input Validation in nr modem
漏洞描述
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-61618
标题 Improper Input Validation in nr modem
漏洞描述
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-61617
标题 Improper Input Validation in nr modem
漏洞描述
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-3012
标题 Out-of-bounds Read in dpc modem
漏洞描述
In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-125 Out-of-bounds Read
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-11133
标题 Improper Input Validation in nr modem
漏洞描述
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-11132
标题 Improper Input Validation in nr modem
漏洞描述
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

CVE ID CVE-2025-11131
标题 Improper Input Validation in nr modem
漏洞描述
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
技术领域 Modem
漏洞类型 CWE-20 Improper Input Validation
攻击途径 Network
CVSS 等级 High
CVSS 分数 7.5
CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
影响芯片*
T8100/T8200/T8300/T9100
影响软件版本
Android13/Android14/Android15/Android16

*受影响芯片组列表可能不完整。如需了解最新信息，OEM可直接访问 https://unisupport.unisoc.com

漏洞类型定义

缩写释义
RCE Remote Code Execution
EoP Elevation of Privilege
ID Information Disclosure
DoS Denial of Service
N/A Classification not available

版本

版本日期描述
1.0 2025-12-01