← Vulnerability feed

Vulnerability record · CVE-2025-61611 · published 9 March 2026

CVE-2025-61611: Linuxfoundation yocto improper input validation vulnerability

Linuxfoundation · Yocto

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed..

7.5 CVSS 3.1 High EPSS 0.56% · top 55.4% CWE-20 · Improper input validation
7.5CVSS 3.1 base score
0.56%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed..

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.unisoc.com/en/support/announcement/2030931350138310657 Vendor Advisory

Track CVE-2025-61611 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-20148Linuxfoundation yocto out-of-bounds write vulnerabilityIn wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code executio…EPSS 0.26%9.8CVE-2024-20080Linuxfoundation yocto improper certificate validation vulnerabilityIn gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privileg…EPSS 0.29%9.8CVE-2024-25626Linuxfoundation yocto os command injection vulnerabilityYocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture…EPSS 1.2%8.8CVE-2024-20040Linuxfoundation yocto out-of-bounds write vulnerabilityIn wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no…EPSS 0.18%8.4CVE-2024-20104Linuxfoundation yocto out-of-bounds write vulnerabilityIn da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional exe…EPSS 0.09%8.4CVE-2024-20053Linuxfoundation yocto out-of-bounds write vulnerabilityIn flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System executi…EPSS 0.09%8.1CVE-2024-20146Linuxfoundation yocto out-of-bounds write vulnerabilityIn wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code exec…EPSS 0.14%7.8CVE-2025-20705Linuxfoundation yocto use after free vulnerabilityIn monitor_hang, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor h…EPSS 0.09%

Source: NIST National Vulnerability Database (record CVE-2025-61611), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.