CVE-2025-11133: 
NixOS vulnerability analysis and mitigation

CVE-2025-11133 is an improper input validation vulnerability in the NR (New Radio/5G) modem component affecting Android devices powered by Unisoc chipsets (T8100, T9100, T8200, T8300). It allows a remote, unauthenticated attacker to trigger a system crash, resulting in a denial of service condition. The vulnerability was disclosed on December 1, 2025, as part of the Google Android December 2025 Security Bulletin, and affects Android versions 13, 14, 15, and 16. It carries a CVSS v3.1 base score of 7.5 (High) (Android Bulletin, Unisoc Advisory).

The root cause is improper input validation (CWE-20) within the NR modem subsystem of Unisoc chipsets. An attacker can send specially crafted network-level input to the modem component, bypassing validation checks and causing a system crash. No privileges or user interaction are required, and the attack vector is entirely network-based, making this exploitable remotely without physical access to the device (Android Bulletin, Unisoc Advisory).

Successful exploitation results in a complete denial of service — the affected Android device crashes or becomes unresponsive. There is no confidentiality or integrity impact; the vulnerability is limited to availability. Devices running Android 13 through 16 on Unisoc T8100, T9100, T8200, or T8300 chipsets are at risk of being remotely crashed without any user interaction or attacker privileges (Android Bulletin, Unisoc Advisory).

There is currently no public proof-of-concept exploit and no evidence of in-the-wild exploitation. The EPSS score is approximately 0.153%, indicating a low probability of exploitation in the near term. The vulnerability has not been added to the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been reported (Android Bulletin).

Apply the Android December 2025 security patch (security patch level 2025-12-01 or later), which includes the fix for CVE-2025-11133 as detailed in the Google Android Security Bulletin. Device manufacturers using Unisoc chipsets should integrate the patch provided in Unisoc's security announcement. Until patching is possible, consider implementing network-level filtering to restrict unexpected 5G NR signaling traffic to affected devices (Android Bulletin, Unisoc Advisory).

Coverage of CVE-2025-11133 was largely routine, appearing in aggregated Android patch roundups. Security news outlets such as The Cyber Throne and BeyondMachines noted it as part of Google's December 2025 patch cycle, which addressed over 100 Android vulnerabilities. No notable independent researcher commentary or significant social media discussion specific to this CVE was observed (BeyondMachines, The Cyber Throne).