CVE-2025-69279

7.5 HIGH

Denial of Service

📋 TL;DR

This vulnerability in nr modem allows remote attackers to cause a system crash through improper input validation, leading to denial of service. It affects systems using vulnerable nr modem implementations and requires no special privileges to exploit.

💻 Affected Systems

Products:

• Unisoc nr modem implementations

Versions: Specific versions not detailed in advisory

Operating Systems: Android-based systems with vulnerable modem firmware

Default Config Vulnerable: ⚠️ Yes

Notes: Affects devices using Unisoc chipsets with vulnerable nr modem firmware versions

📦 What is this software?

Android by Google

View all CVEs affecting Android →

Android by Google

View all CVEs affecting Android →

Android by Google

View all CVEs affecting Android →

Android by Google

View all CVEs affecting Android →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system crash and denial of service affecting all modem-dependent services, potentially requiring physical restart.

🟠

Likely Case

Temporary service disruption and system instability requiring reboot to restore functionality.

🟢

If Mitigated

Minimal impact with proper network segmentation and input validation controls in place.

🌐 Internet-Facing: HIGH

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

Remote exploitation possible without authentication due to improper input validation in modem processing

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Not specified in advisory

Vendor Advisory: https://www.unisoc.com/en/support/announcement/2030931350138310657

Restart Required: Yes

Instructions:

1. Contact device manufacturer for firmware updates 2. Apply modem firmware patch 3. Reboot device to activate new firmware

🔧 Temporary Workarounds

Network segmentation

all

Isolate modem interfaces from untrusted networks

Input validation at application layer

all

Implement additional input validation before modem communication

🧯 If You Can't Patch

• Implement strict network access controls to modem interfaces
• Monitor for abnormal modem behavior and crash events

🔍 How to Verify

Check if Vulnerable:

Copy

Check modem firmware version against vendor advisory and contact manufacturer for vulnerability status

Check Version:

Copy

Device-specific modem firmware check commands vary by manufacturer

Verify Fix Applied:

Copy

Verify modem firmware has been updated to patched version and test with controlled input validation tests

📡 Detection & Monitoring

Log Indicators:

• Modem crash logs
• System reboot events
• Unexpected modem resets

Network Indicators:

• Abnormal modem protocol traffic patterns
• Unexpected modem disconnections

SIEM Query:

Copy

source="modem" AND (event="crash" OR event="reset" OR event="reboot")

📊 Metadata

CVE ID: CVE-2025-69279

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-20

Published: March 9, 2026

Last Updated: March 9, 2026

🔗 References

• https://www.unisoc.com/en/support/announcement/2030931350138310657 Vendor Advisory

📤 Share & Export

Twitter LinkedIn Reddit Copy Link

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-69279, you might also want to check these:

CVE-2022-47190 10.0

CVE-2022-47190 allows remote attackers to upload malicious firmware containing a webshell to Generex...

Same vulnerability type (CWE-20)

CVE-2020-12388 10.0

This vulnerability allows attackers to escape Firefox's content process sandbox on Windows systems, ...

Same vulnerability type (CWE-20)

CVE-2024-3400 10.0

CVE-2024-3400 is a critical command injection vulnerability in Palo Alto Networks PAN-OS GlobalProte...

Same vulnerability type (CWE-20)