误差通告
总结
- 严重程度 CVES
- High CVE-2025-31718,CVE-2025-31717
细节
- CVE ID CVE-2025-31718
- 问题 Improper Input Validation in modem
- 误差形貌
In modem, there is a possible system crash due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed.
- 手艺领域 Modem
- 误差类型 CWE-20 Improper Input Validation
- 攻击途径 Network
- CVSS 品级 High
- CVSS 分数 7.5
- CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- 影响芯片*
T606/T612/T616/T750/T765/T760/T770/T820/S8000/T8300/T9300
- 影响软件版本
Android13/Android14/Android15/Android16
- CVE ID CVE-2025-31717
- 问题 Improper Input Validation in modem
- 误差形貌
In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
- 手艺领域 Modem
- 误差类型 CWE-20 Improper Input Validation
- 攻击途径 Network
- CVSS 品级 High
- CVSS 分数 7.5
- CVSS 评分 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- 影响芯片*
T750/T765/T760/T770/T820/S8000/T8300/T9300
- 影响软件版本
Android13/Android14/Android15/Android16
*受影响芯片组列表可能不完整。。。如需相识最新信息，，，OEM可直接会见 https://unisupport.unisoc.com
误差类型界说
- 缩写 释义
- RCE Remote Code Execution
- EoP Elevation of Privilege
- ID Information Disclosure
- DoS Denial of Service
- N/A Classification not available
版本
- 版本 日期 形貌
- 1.0 2025-10-01