The flaw resides in the Modem IMS component of Unisoc devices. An attacker can construct packets or messages that evade the component’s input validation, causing the modem to crash or hang. This results in a loss of all services that rely on the modem. No escalation of privileges is required.

Affected hardware includes Unisoc (Shanghai) Technologies Co., Ltd.’s SC7731E, SC9832E, SC9863A, T310, T610, T618, T7200, T7225, T7250, T7255, T7280, T7300, T8100, T8200, and T8300 platforms. Software that embeds the Modem IMS stack is also impacted, notably Android operating systems version 13 through 16, as indicated by the listed CPEs. The vendor has not disclosed specific firmware or OS revisions containing the fix.

The CVSS score of 7.5 indicates high severity, and the EPSS of < 1 % shows a very low but non‑zero probability of exploitation. The vulnerability is not listed in CISA KEV, suggesting no publicly known exploits. Based on the description, it is inferred that attackers would need remote network access to the modem’s IMS interface, which could be over IP or a proprietary protocol. The flaw can be exploited without additional privileges, leading to a remote denial of service that can disrupt all cellular or satellite connectivity for the device.