CVE-2025-61608: 
NixOS vulnerability analysis and mitigation

CVE-2025-61608 is an improper input validation vulnerability in the NR (New Radio/5G) modem component of Unisoc chipsets that can cause a system crash, leading to remote denial of service. It affects Android 13, 14, 15, and 16 running on Unisoc T8100/T9100/T8200/T8300 platforms. The vulnerability was disclosed on December 1, 2025, as part of the Google Android December 2025 Security Bulletin. It carries a CVSS v3.1 base score of 7.5 (High) (Android Bulletin, Unisoc Advisory).

The vulnerability is classified as CWE-20 (Improper Input Validation) and resides in the NR modem component — the 5G radio modem stack — of Unisoc T8100/T9100/T8200/T8300 SoCs. An unauthenticated remote attacker can send specially crafted network-layer input that the modem fails to properly validate, triggering a system crash. No user interaction or elevated privileges are required for exploitation, and the attack vector is network-based (Android Bulletin, Unisoc Advisory).

Successful exploitation results in a remote denial of service, causing the affected Android device to crash without any user interaction or attacker privileges. The impact is limited to availability — there is no confidentiality or integrity compromise. Affected devices running Android 13 through 16 on Unisoc T8100/T9100/T8200/T8300 platforms could be rendered temporarily non-functional, disrupting device usability (Android Bulletin, Unisoc Advisory).

There is no public proof-of-concept exploit and no evidence of in-the-wild exploitation at this time. The vulnerability has an EPSS score of approximately 0.0015 (0.15%), indicating a low probability of exploitation in the near term. It has not been added to the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been reported (Android Bulletin).

Google released a patch for this vulnerability in the Android December 2025 Security Bulletin (patch level 2025-12-01). Users should apply the latest Android security update to devices running Android 13, 14, 15, or 16 on affected Unisoc platforms. As interim measures, network-level filtering of anomalous 5G/NR traffic and monitoring for unexpected device crashes or reboots are recommended (Android Bulletin, Unisoc Advisory).

The vulnerability was noted in coverage of Google's December 2025 Android security bulletin, which addressed over 100 vulnerabilities. Samsung's December 2025 security patch details were also reported in relation to this bulletin cycle. No significant independent researcher commentary or social media discussion specific to CVE-2025-61608 has been identified (Android Bulletin).