Is CVE-2025-71256 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-71256 being exploited in the wild.

How severe is CVE-2025-71256?

High severity, with a CVSS score of 7.5, published 6 May 2026.

Which products and versions are affected?

Unisoc T8100 Android 13, 14, 15, 16; Unisoc T8100 chipset Android 13, 14, 15, 16; Unisoc T8200 Android 13, 14, 15, 16; Unisoc T8200 chipset Android 13, 14, 15, 16; and 4 more.

Is there a fix for CVE-2025-71256?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-71256 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2025-71256?

Check whether you run Unisoc T8100, Unisoc T8100 chipset, Unisoc T8200 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-71256: Unisoc NR modem improper input validation in T8000/T9000 series chipsets

CVE-2025-71256 · Severity: high · CVSS 7.5 · Published 2026-05-06

A vulnerability exists in the 5G (NR) modem software used in several Unisoc chipsets found in mobile devices. An attacker could remotely exploit this flaw to crash the modem, causing a loss of cellular connectivity and a denial of service. This attack can be carried out over the network without any user interaction or special access permissions.

Technologies: Unisoc T8100, Unisoc T8200, Unisoc T8300, Unisoc T9100. Vendors: Unisoc.

Quick answers

Is CVE-2025-71256 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-71256 being exploited in the wild.
How severe is CVE-2025-71256?: High severity, with a CVSS score of 7.5, published 6 May 2026.
Which products and versions are affected?: Unisoc T8100 Android 13, 14, 15, 16; Unisoc T8100 chipset Android 13, 14, 15, 16; Unisoc T8200 Android 13, 14, 15, 16; Unisoc T8200 chipset Android 13, 14, 15, 16; and 4 more.
Is there a fix for CVE-2025-71256?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-71256 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2025-71256?: Check whether you run Unisoc T8100, Unisoc T8100 chipset, Unisoc T8200 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper input validation vulnerability (CWE-20) exists in the New Radio (NR) modem component of Unisoc T8100, T9100, T8200, and T8300 chipsets. The flaw allows a remote, unauthenticated attacker to send specially crafted packets over the network to trigger a system crash or modem hang. No additional execution privileges or user interaction are required for exploitation. The vulnerability affects devices running Android versions 13 through 16 using the impacted hardware. A fix is typically distributed via vendor-specific security updates or OEM firmware patches.

Affected products

Unisoc T8100 chipset Android 13, 14, 15, 16
Unisoc T9100 chipset Android 13, 14, 15, 16
Unisoc T8200 chipset Android 13, 14, 15, 16
Unisoc T8300 chipset Android 13, 14, 15, 16

Timeline

2026-05-06: advisory: Initial advisory published by Unisoc
2026-05-06: disclosed: NVD publication date

References

https://www.unisoc.com/en/support/product-security-bulletin/2051836844671422466

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.