CVE-2025-61612: 
NixOS vulnerability analysis and mitigation

CVE-2025-61612 is an improper input validation vulnerability in the NR (New Radio/5G) modem component affecting Android devices powered by Unisoc chipsets (T7300, T8100, T9100, T8200, T8300). The flaw can cause a system crash, leading to remote denial of service with no authentication or additional privileges required. It affects Android versions 13.0, 14.0, 15.0, and 16.0. The vulnerability was published on March 9, 2026, and patched via the Google Android March 2026 security bulletin. It carries a CVSS v3.1 base score of 7.5 (High) (Red Hat Advisory, Unisoc Advisory, Android Bulletin).

The vulnerability is classified under CWE-20 (Improper Input Validation) and resides in the NR modem firmware component of Unisoc chipsets integrated into Android devices. An unauthenticated remote attacker can send specially crafted network input to the NR modem that bypasses input validation checks, triggering a system crash. The attack vector is network-based, requires no user interaction, and no privileges, making it exploitable over cellular or related network interfaces without any preconditions on the victim's side. No public proof-of-concept or detailed technical write-up has been identified at this time (Unisoc Advisory, Android Bulletin).

Successful exploitation results in a system crash on the affected Android device, causing a complete loss of availability (denial of service). There is no impact on confidentiality or integrity, as the vulnerability does not enable code execution or data access. Affected devices running Unisoc T7300, T8100, T9100, T8200, or T8300 chipsets on Android 13–16 could be rendered temporarily inoperable by a remote attacker without any interaction from the device owner (Red Hat Advisory, Unisoc Advisory).

There is no known public proof-of-concept exploit and no evidence of active in-the-wild exploitation as of the time of reporting. The EPSS score is approximately 0.20%, indicating a low probability of exploitation in the near term. No threat actor attribution has been identified, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. Detection support is available via Qualys scanner (detection ID 610761) (Red Hat Advisory, Android Bulletin).

Google has released patches addressing this vulnerability in the Android March 2026 security bulletin (patch level 2026-03-01 and 2026-03-02). Unisoc has also published a device-specific firmware update via their support announcement. Users and administrators should apply the March 2026 Android security update to all affected devices running Android 13, 14, 15, or 16 with Unisoc chipsets. Prioritize patching in environments where device availability is operationally critical, as the vulnerability enables unauthenticated remote denial of service (Android Bulletin, Unisoc Advisory).

Coverage of CVE-2025-61612 has been limited to aggregator and security news sites such as GBHackers and SammyFans, which reported on the broader Android March 2026 security bulletin that addressed 129 flaws. No notable independent researcher commentary or significant social media discussion has been identified beyond automated CVE tracking posts (GBHackers, SammyFans).