In Modem Integrated Modem Service (IMS) a flaw exists where the input is not properly validated. This allows an attacker to cause a remote denial of service. No additional privileges are required; the impact is limited to service disruption and possible loss of connectivity.

Vendors affected are Unisoc (Shanghai) Technologies Co., Ltd. The vulnerability applies to a range of modem chipsets including SC7731E, SC9832E, SC9863A, T310, T610, T618, T7200, T7225, T7250, T7255, T7280, T7300, T8100, T9100, T8200, and T8300.

The CVSS score of 7.5 indicates a high severity level. The EPSS score is not available, so the current probability of exploitation can’t be quantified. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is remote, possibly over the air or through network traffic that the Modem IMS processes. No explicit conditions for exploitation are stated, but the attacker only needs to send crafted input that bypasses the validation.