Denial of Service Vulnerability in cplog Service by Unisoc
CVE-2025-31711

5.1MEDIUM

Key Information:

Vendor

Unisoc (shanghai) Technologies Co., Ltd.

Status
Sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t750/t765/t760/t770/t820/s8000/t8300/t9300
Vendor
CVE Published:
3 June 2025

What is CVE-2025-31711?

The cplog service from Unisoc contains a vulnerability that may result in a local denial of service. This occurs due to a null pointer dereference, potentially leading the service to crash without requiring any additional execution privileges from the attacker. It is critical for users and system administrators to be aware of this issue and implement necessary precautions to safeguard against potential disruptions.

Affected Version(s)

SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T750/T765/T760/T770/T820/S8000/T8300/T9300 Android13/Android14/Android15

References

https://www.unisoc.com/en_us/secy/announcementDetail/1929...

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.