A critical denial of service vulnerability exists in Unisoc modem firmware that allows unauthenticated remote attackers to crash affected mobile devices.

The vulnerability is caused by improper input validation within the NR modem firmware, which can be exploited by an unauthenticated remote attacker to induce a system crash.

The ability for a remote, unauthenticated attacker to cause a system crash poses a significant risk to device availability and operational continuity. Given the CVSS score of 7.5, this high-severity flaw could lead to widespread service disruption for mobile users, impacting both personal and enterprise communication workflows.

Immediate Action: Monitor the official Unisoc support portal for firmware updates and apply them to affected devices as soon as they become available.

Proactive Monitoring: Security teams should monitor device logs for unexpected modem restarts or connectivity drops that may indicate exploitation attempts.

Compensating Controls: While direct mitigation is limited for modem firmware, users should maintain device security patches and restrict exposure to untrusted wireless networks where possible.

Public Exploit Available: No (exploit_available: unknown)

This vulnerability presents a clear risk to device stability, and the lack of required privileges for an attacker makes it particularly concerning. Organizations deploying devices with Unisoc chipsets should prioritize the deployment of vendor security updates the moment they are released to prevent potential denial of service attacks.