CVE-2025-11133: Input Validation
Published Dec 1, 2025
·Updated
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
Affected Software
10 affected componentsFixes available
All of the following
Any of the following
Google Android=13.0
Google Android=14.0
Google Android=15.0
Google Android=16.0
Any of the following
UNISOC T8100
UNISOC T8200
UNISOC T8300
UNISOC T9100
Google Android
android/:unknown:>=SoCVersion:0<SoCVersion:2025-12-05
SoCVersion:2025-12-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2025-12-05
Event History
Dec 1, 2025
CVE Published
via Android·12:00 AM
Advisory Published
via OSV·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
CVE Published
via MITRE·07:35 AM
Data Sourced
via MITRE·07:35 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-11133?
CVE-2025-11133 has a severity that indicates it can lead to a remote denial of service.
2
How do I fix CVE-2025-11133?
To fix CVE-2025-11133, update your device to the latest patched version of Android.
3
What devices are affected by CVE-2025-11133?
CVE-2025-11133 affects Google Android versions 13.0, 14.0, 15.0, and 16.0.
4
Can CVE-2025-11133 be exploited remotely?
Yes, CVE-2025-11133 can be exploited remotely due to improper input validation.
5
What are the potential impacts of CVE-2025-11133?
The potential impact of CVE-2025-11133 is a system crash resulting in denial of service.