A misuse of input validation is present in the nr modem component, which could allow a remote attacker to trigger a service crash. Based on the description, it is inferred that the attacker would need to perform actions with system execution privileges, enabling abuse of the modem to deny service to legitimate users. The weakness is a classic improper input validation scenario.

Unisoc (Shanghai) Technologies Co., Ltd. devices bearing the model identifiers T8100, T9100, T8200, and T8300 are impacted. No specific firmware releases were enumerated, so any exposed instance of the nr modem on these platforms is considered vulnerable.

The CVSS score of 7.5 designates a high severity vulnerability. The EPSS score is 0.00403, indicating a very low but nonzero exploitation probability. The lack of inclusion in CISA’s KEV catalog suggests no publicly known active exploitation yet. Based on the description, it is inferred that the prerequisite of system execution privileges indicates that the attack would likely require either local access or successful privilege escalation on the target device. Based on the description, it is inferred that an attacker could exploit the modem’s interface by injecting malformed data to cause a crash, which would disable services.