The bug is an input validation flaw inside the modem firmware that can be triggered by an attacker who sends specially crafted data to the modem. The flaw does not require privilege escalation; it merely causes the modem to crash or stall, resulting in a loss of network connectivity for the device. Because the crash disables the modem, any services or communications that depend on it are also disrupted.

This vulnerability applies to all Unisoc (Shanghai) Technologies Co., Ltd. modem devices in the T8100, T9100, T8200, and T8300 series. No specific firmware version is known, so any firmware image running on those units should be considered at risk until a patch is applied.

With a CVSS score of 7.5 the vulnerability falls into the high severity range. The EPSS score of less than 1% indicates a very low likelihood of exploitation in the wild, and the absence from the CISA KEV catalog means no publicly known exploits are yet confirmed. The attack vector is most likely remote, over network traffic directed to the modem, exploiting the improper input validation. An attacker would simply send the malicious payload; any host with an older firmware would exhibit service interruption.