## Summary
In nr modem (Unisoc modem firmware) there is a possible improper input validation issue that can cause a remote system crash. The NVD describes it as a remote denial of service with no additional execution privileges required.
## Technical Details
- Vulnerability type: CWE-20 (Improper Input Validation)
- Affected component: nr modem
- Failure mode: system crash leading to remote denial of service
- Attack characteristics (from NVD/CVSS):
- Network reachable (AV:N)
- No special privileges required (PR:N)
- No user interaction (UI:N)
- Scope unchanged (S:U)
- Availability impact is high (A:H)
## Affected
- google android 13.0 (as provided)
- Unisoc affected chipsets listed for related nr modem improper input validation issues:
- T7300/T8100/T9100/T8200/T8300
- Affected software versions (from the Unisoc advisory content):
- Android13/Android14/Android15/Android16
## Impact
- Remote DoS via nr modem input handling, resulting in a system crash.
- Confidentiality and integrity are indicated as not impacted (C:N, I:N), while availability is impacted (A:H).
## Mitigation
1. Apply the vendor’s recommended security update/patch for the affected modem/firmware components (Unisoc advisory indicates a security CVE set for modem improper input validation).
2. If patching is not immediately possible, reduce exposure by limiting network paths that can reach the modem service responsible for nr modem communications.
3. Monitor for modem-related crashes/reboots and correlate with network activity targeting the device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD-CWE-noinfo