Qualcomm Modem CVE-2025-31718/31717 Command Injection Vulnerability Advisory

Critical Vulnerability Information Vulnerability Overview Security Level: High CVE IDs: CVE-2025-31718, CVE-2025-31717 Detailed Information CVE-2025-31718 Title: Improper Neutralization of Special Elements Leading to Command Injection in Modem Description: Due to inadequate input validation, the modem may be susceptible to system crashes. This could lead to remote privilege escalation without requiring additional execution privileges. Technical Domain: Modem Vulnerability Type: CWE-77 Command Injection Access Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:A/H Affected Chipsets: T60/T812/T616/T750/T765/T760/T770/T820/S8000/T8300/T9300 Affected Software Versions: Android13/Android14/Android15/Android16 CVE-2025-31717 Title: Improper Neutralization of Special Elements Leading to Command Injection in Modem Description: Due to inadequate input validation, the modem may be susceptible to system crashes. This could lead to remote denial of service without requiring additional execution privileges. Technical Domain: Modem Vulnerability Type: CWE-77 Command Injection Access Vector: Network CVSS Rating: High CVSS Score: 7.5 CVSS String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Chipsets: T750/T765/T760/T770/T820/S8000/T8300/T9300 Affected Software Versions: Android13/Android14/Android15/Android16 Vulnerability Type Definitions RCE: Remote Code Execution EaP: Privilege Escalation ID: Information Disclosure DoS: Denial of Service N/A: Classification Not Available Version Version: 1.0 Date: 2025-10-01

Goal Reached Thanks to every supporter — we hit 100%!

Qualcomm Modem CVE-2025-31718/31717 Command Injection Vulnerability Advisory