CVE-2021-38787

There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPATIONIOCSUNXIFLUSHRANGE" to cause a system crash denial of service...

Integer overflow

There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPATIONIOCSUNXIFLUSHRANGE" to cause a system crash denial of service...

CVE-2021-38787

CVE-2021-38787 affects Allwinner R818 SoC Android Q SDK V1.0 where an integer overflow in the ION driver ("/dev/ion") can be triggered via the COMPAT_ION_IOC_SUNXI_FLUSH_RANGE ioctl, leading to a system crash (denial of service). Connected sources confirm the vulnerable component is the ION drive...

CVE-2021-38786

There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash denial of service...

CVE-2021-38786

There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash denial of service...

Null pointer dereference

There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash denial of service...

CVE-2021-38786

Summary of CVE-2021-38786 (Allwinner R818): There is a NULL pointer dereference in the media/libcedarc/vdecoder component of the Allwinner R818 SoC Android Q SDK V1.0, which can lead to a media crash and a denial of service. This is documented across multiple sources (NVD, Red Hat, CVE listing) w...

CVE-2021-38788: Undefined Security Weakness

The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. Malicious apps can use the interface provided by the service to set the number of applications allowed to run in the background to 0 and add themselves to the whitelist, so that once other...

CVE-2021-38787: Integer Overflow or Wraparound

There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPATIONIOCSUNXIFLUSHRANGE" to cause a system crash denial of service...

PT-2022-10778

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK version V1.0 Description The issue is related to an incorrect access control vulnerability. This vulnerability does not check the caller's permission, allowing a third-party app to change system settings...

PT-2022-10777

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK version V1.0 Description The Background service in the affected software is used to manage background applications. Malicious apps can exploit the interface provided by this service to set the number of...

PT-2022-10776

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is an integer overflow in the ION driver "/dev/ion" that could cause a system crash, resulting in a denial of service. This can be triggered using the ioctl cmd COMPAT ION IOC SUNXI...

Allwinner Technology R818 安全漏洞

The Allwinner Technology R818 is a quad-core intelligent voice with screen chip from Allwinner Technology Zhuhai, China. A security vulnerability exists in the Allwinner Technology R818, which stems from an access control security issue in the Android Q SDK V1.0 that can be exploited by an attack...

Allwinner Technology R818 输入验证错误漏洞

The Allwinner Technology R818 is a quad-core intelligent voice with screen chip from Allwinner Technology Zhuhai, China. The Allwinner Technology R818 suffers from an input validation error vulnerability that originates from an integer overflow in the ION driver dev ION of the Android Q SDK V1.0,...

CVE-2021-38789: Missing Authorization

Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings...

CVE-2021-38786: NULL Pointer Dereference

There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash denial of service...

PT-2022-10775

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is related to a NULL pointer dereference in the media/libcedarc/vdecoder component, which could lead to a media crash, resulting in a denial of service. Recommendations For Allwinner...

CVE-2021-38784

There is a NULL pointer dereference in the syscall openexec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash...

CVE-2021-38784

There is a NULL pointer dereference in the syscall openexec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash...

CVE-2021-38784

There is a NULL pointer dereference in the syscall openexec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash...