The flaw lies in the NR modem firmware of Unisoc devices where input data is not properly validated, leading to a remote denial of service that does not require privileged access. This is an example of improper input validation—a weakness that can cause service disruption when malformed packets or requests are processed by the modem.

Unisoc (Shanghai) Technologies Co., Ltd. devices, specifically the T8100, T9100, T8200, and T8300 series. Any firmware or software that incorporates the NR modem component on these chipsets is potentially vulnerable; no specific version numbers are provided, so all current builds using this modem may be affected.

With a CVSS score of 7.5, the problem is considered high severity. The attack vector is inferred to be remote, as the denial of service can be triggered from outside the device without needing local privileges or additional execution rights. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, suggesting that, as of now, public exploitation is not widely observed. Nonetheless, the lack of privilege requirements makes it an attractive target for adversaries who can disrupt device connectivity.