CVE-2025-3012: 
NixOS vulnerability analysis and mitigation

CVE-2025-3012 is a null pointer dereference vulnerability in the dpc modem component of Unisoc chipsets (T8100/T8200/T8300/T9100) that can cause a system crash, leading to remote denial of service. It affects Android versions 13, 14, 15, and 16 running on affected Unisoc hardware. No additional execution privileges or user interaction are required for exploitation. It carries a CVSS v3.1 base score of 7.5 (High) (Android Bulletin, Unisoc Advisory).

The vulnerability is rooted in a null pointer dereference (CWE-476) within the dpc modem component of Unisoc chipsets. An unauthenticated remote attacker can trigger the flaw over the network without any user interaction or elevated privileges, causing the modem subsystem to crash. The attack vector is network-accessible (AV:N), with low complexity (AC:L), making it straightforward to exploit against vulnerable devices (Android Bulletin, Unisoc Advisory).

Successful exploitation results in a system crash on the affected Android device, causing a denial of service that disrupts device connectivity and availability. There is no impact on confidentiality or data integrity, as the vulnerability is limited to availability (A:H). Affected devices include those running Unisoc T8100, T8200, T8300, and T9100 chipsets on Android 13 through 16 (Android Bulletin, Unisoc Advisory).

There is no public proof-of-concept exploit available, and no evidence of in-the-wild exploitation has been observed as of the time of publication. The EPSS score is approximately 0.0015 (0.15%), indicating a low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been reported (Android Bulletin).

Google addressed this vulnerability in the Android Security Bulletin dated December 1, 2025. Users should apply the December 2025 security patch level to all affected devices running Unisoc T8100/T8200/T8300/T9100 chipsets on Android 13–16. As interim measures, network-level filtering of potentially malicious traffic targeting the modem component and monitoring for unusual modem-related network activity are recommended (Android Bulletin, Unisoc Advisory).

The vulnerability was noted in coverage of Google's December 2025 Android security bulletin, which addressed over 100 vulnerabilities (BeyondMachines). No significant independent researcher commentary or notable social media discussion specific to CVE-2025-3012 has been identified beyond routine CVE tracking and aggregation sites.