CVE-2025-3012

CVE-2025-3012

High · published December 1, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

⚡ A null pointer dereference in dpc modem could leave your system crashing without a hitch! Think of it like a delivery truck following the wrong route and suddenly getting stuck in a dead-end; just as the truck can't move forward, your system could come to a halt with this issue! An attacker can trigger this flaw from afar, leading to a complete denial of service. Imagine your network's lights going out unexpectedly — users would be left in the dark, unable to access critical services, which could be absolutely devastating for business operations!

Put simply

Think of it like a delivery truck following the wrong route and suddenly getting stuck in a dead-end; just as the truck can't move forward, your system could come to a halt with this issue! This vulnerability allows a remote attacker to exploit a null pointer dereference, resulting in a system crash without needing any additional execution privileges.

What to do

An attacker can trigger this flaw from afar, leading to a complete denial of service. Imagine your network's lights going out unexpectedly — users would be left in the dark, unable to access critical services, which could be absolutely devastating for business operations! To mitigate this risk, immediately apply any available patches from your modem provider. It's also wise to monitor network activity closely for unusual behaviors that might indicate attempts to exploit this vulnerability. You've got this! By taking action now, you can keep your systems running smoothly and maintain your security hero status! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Published
2025-12-01T13:15Z
Affected products (4)
ProductVersionsFixed in
google/androidall versions—
google/androidall versions—
google/androidall versions—
google/androidall versions—
References (1)
EPSS history
Timeline
  • 01 DEC 07:35Z
    In dpc modem, there is a possible system crash due to null pointer dereference
    cvelistv5