CVE-2025-61608: Input Validation
Published Dec 1, 2025
·Updated
In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed
Affected Software
10 affected componentsFixes available
All of the following
Any of the following
Google Android=13.0
Google Android=14.0
Google Android=15.0
Google Android=16.0
Any of the following
UNISOC T8100
UNISOC T8200
UNISOC T8300
UNISOC T9100
Google Android
android/:unknown:>=SoCVersion:0<SoCVersion:2025-12-05
SoCVersion:2025-12-05
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2025-12-05
Event History
Dec 1, 2025
CVE Published
via Android·12:00 AM
Advisory Published
via OSV·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
CVE Published
via MITRE·07:36 AM
Data Sourced
via MITRE·07:36 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-61608?
CVE-2025-61608 has a medium severity level as it can lead to a remote denial of service.
2
How do I fix CVE-2025-61608?
To fix CVE-2025-61608, ensure that you apply the latest patches provided by your software vendor.
3
What versions of Android are affected by CVE-2025-61608?
CVE-2025-61608 affects Google Android versions 13.0, 14.0, 15.0, and 16.0.
4
What is the risk of exploitation for CVE-2025-61608?
CVE-2025-61608 can be exploited remotely, leading to potential system crashes.
5
Who is affected by CVE-2025-61608?
Users running affected versions of Google Android are at risk from CVE-2025-61608.