Lucene search

[email protected]CVE-2021-38786

HistoryJan 19, 2022 - 12:15 p.m.

CVE-2021-38786

2022-01-1912:15:00

CWE-476

[email protected]

web.nvd.nist.gov

cve-2021-38786

null pointer dereference

allwinner r818 soc

android q sdk

denial of service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

75.0%

JSON

There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service).

CPENameOperatorVersion
allwinnertech:android_q_sdkallwinnertech android q sdkeq1.0

CPE	Name	Operator	Version
allwinnertech:android_q_sdk	allwinnertech android q sdk	eq	1.0

References

github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9AMedia%20vdecoder%20has%20Null%20Pointer%20Dereference%20Vulnerability.md

vul.wangan.com/a/CNVD-2021-49173

www.allwinnertech.com/index.php?c=product&a=index&id=92

www.cnvd.org.cn/flaw/show/CNVD-2021-49173

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

75.0%

JSON

Related for CVE-2021-38786

prion1 cvelist1 cnvd1