CVE-2025-61613: 
NixOS vulnerability analysis and mitigation

CVE-2025-61613 is an improper input validation vulnerability in the NR (New Radio/5G) modem component affecting Android devices powered by Unisoc chipsets (T8100, T9100, T8200, T8300). The flaw can cause a system crash, leading to remote denial of service with no privileges required. Affected Android versions include 13, 14, 15, and 16. It carries a CVSS v3.1 base score of 7.5 (High) (Unisoc Advisory, Android Bulletin). The vulnerability was published on March 9, 2026, and patches were included in the Android March 2026 security bulletin (Android Bulletin).

The root cause is improper input validation (CWE-20) in the NR modem firmware component used in Unisoc chipsets. An unauthenticated remote attacker can send malformed or unexpected input over the network to the modem subsystem, triggering a system crash. No user interaction or elevated privileges are required, and the attack vector is network-based with low complexity (Unisoc Advisory, Android Bulletin). No public proof-of-concept code or detailed technical write-ups have been identified at this time.

Successful exploitation results in a system crash on the affected Android device, causing a denial of service condition. The impact is limited to availability — there is no confidentiality or integrity impact, and the scope is unchanged (the crash is confined to the affected device). Devices running Android 13 through 16 on Unisoc T8100, T9100, T8200, or T8300 chipsets are at risk of being remotely crashed without any user interaction (Unisoc Advisory, Android Bulletin).

There is no known public proof-of-concept exploit and no evidence of active in-the-wild exploitation at this time (Unisoc Advisory). The EPSS score is approximately 0.20%, indicating a low probability of exploitation in the near term. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. No threat actor attribution has been reported.

Google released patches addressing this vulnerability in the Android March 2026 security patch level (2026-03-01 and 2026-03-02) (Android Bulletin). Unisoc has also published a corresponding security advisory with fixes for affected chipsets (T8100, T9100, T8200, T8300) (Unisoc Advisory). Users should apply the latest available security patch from their device manufacturer as soon as possible. As an interim measure, limiting device exposure to untrusted or public networks and monitoring for unexpected modem-related crashes can reduce risk.

The vulnerability received routine coverage from vulnerability tracking platforms and security news aggregators following its disclosure in the March 2026 Android Security Bulletin. Samsung's March 2026 security patch details were noted to include this fix for applicable devices (SammyFans). No significant researcher commentary or notable community debate has been observed beyond standard CVE tracking activity.