# CVE-2025-71256: Unisoc NR modem improper input validation in T8000/T9000 series chipsets

Source: https://junglewise.ai/threats/cve-2025-71256-unisoc-nr-modem-improper-input-validation-in-t8000-t9000-series  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-06. Updated: 2026-07-25  
License: CC BY 4.0 with a link back

CVE-2025-71256 · Severity: high · CVSS 7.5 · Published 2026-05-06

A vulnerability exists in the 5G (NR) modem software used in several Unisoc chipsets found in mobile devices. An attacker could remotely exploit this flaw to crash the modem, causing a loss of cellular connectivity and a denial of service. This attack can be carried out over the network without any user interaction or special access permissions.

Technologies: [Unisoc T8100](https://junglewise.ai/threats/technologies/t8100), [Unisoc T8200](https://junglewise.ai/threats/technologies/t8200), [Unisoc T8300](https://junglewise.ai/threats/technologies/t8300), [Unisoc T9100](https://junglewise.ai/threats/technologies/t9100). Vendors: [Unisoc](https://junglewise.ai/threats/vendors/unisoc).

## Quick answers

**Is CVE-2025-71256 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-71256 being exploited in the wild.

**How severe is CVE-2025-71256?** High severity, with a CVSS score of 7.5, published 6 May 2026.

**Which products and versions are affected?** Unisoc T8100 Android 13, 14, 15, 16; Unisoc T8100 chipset Android 13, 14, 15, 16; Unisoc T8200 Android 13, 14, 15, 16; Unisoc T8200 chipset Android 13, 14, 15, 16; and 4 more.

**Is there a fix for CVE-2025-71256?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-71256 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2025-71256?** Check whether you run Unisoc T8100, Unisoc T8100 chipset, Unisoc T8200 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An improper input validation vulnerability (CWE-20) exists in the New Radio (NR) modem component of Unisoc T8100, T9100, T8200, and T8300 chipsets. The flaw allows a remote, unauthenticated attacker to send specially crafted packets over the network to trigger a system crash or modem hang. No additional execution privileges or user interaction are required for exploitation. The vulnerability affects devices running Android versions 13 through 16 using the impacted hardware. A fix is typically distributed via vendor-specific security updates or OEM firmware patches.

## Affected products

- Unisoc T8100 chipset Android 13, 14, 15, 16
- Unisoc T9100 chipset Android 13, 14, 15, 16
- Unisoc T8200 chipset Android 13, 14, 15, 16
- Unisoc T8300 chipset Android 13, 14, 15, 16

## Timeline

- 2026-05-06: advisory: Initial advisory published by Unisoc
- 2026-05-06: disclosed: NVD publication date

## References

- [https://www.unisoc.com/en/support/product-security-bulletin/2051836844671422466](https://www.unisoc.com/en/support/product-security-bulletin/2051836844671422466)

## Related threats

- [Unisoc bootloader out-of-bounds write in firmware update](https://junglewise.ai/threats/cve-2026-80335-in-the-bootloader-download-module-there-is-a-possible-out-of)
- [Unisoc UFS firmware out-of-bounds write in FFU](https://junglewise.ai/threats/cve-2026-121803-in-ufs-field-firmware-update-ffu-functionality-there-is-a)
- [Unisoc kernel apsys DVFS out-of-bounds read](https://junglewise.ai/threats/cve-2026-87765-in-the-kernel-apsys-dvfs-driver-there-is-a-possible-out-of-bounds)
- [Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71255-unisoc-modem-ims-improper-input-validation-denial-of-service)
- [Unisoc Modem IMS improper input validation denial of service](https://junglewise.ai/threats/cve-2025-71254-unisoc-modem-ims-improper-input-validation-denial-of-service)