CVE-2025-61611

Published Mar 9, 2026

Last updated 6 months ago

CVSS high 7.5

Overview

Description
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed..
Source
security@unisoc.com
NVD status
Modified
Products
yocto

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.5
Impact score
3.6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity
HIGH

Weaknesses

nvd@nist.gov
NVD-CWE-noinfo
134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-20

Social media

Hype score
Not currently trending

  1. CVE-2025-61611 (CVSS:7.5, HIGH) is Modified. In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional ..https://t.co/tqUoTnm1aF #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    @cracbot

    12 Mar 2026

    35 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2025-61611 In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed.. https://t.co/1hp1pBT9sM

    @CVEnew

    9 Mar 2026

    43 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. ⚡ New CVE Alert: CVE-2025-61611 📊 Severity: 7.5 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://t.co/zPM3UN4zXm #CVE-2025-61611 #CVE #High  #CyberSecurity #InfoSec https://t.co/eFYcrjZQHC

    @CVEarity

    9 Mar 2026

    51 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. CVE-2025-61611 Remote Denial of Service Vulnerability in Modem via Improper Input Validation https://t.co/nJcmpWLmVh

    @VulmonFeeds

    9 Mar 2026

    36 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

Configurations

Related CVEs

  1. In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.•CVE-2026-20435
  2. In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833.•CVE-2025-20765
  3. In monitor_hang, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09989078; Issue ID: MSV-3964.•CVE-2025-20705
  4. In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09915215; Issue ID: MSV-3801.•CVE-2025-20696
  5. In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-3421.•CVE-2025-20693

References

Sources include official advisories and independent security research.