Null pointer dereference

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

CVE-2021-38784

There is a NULL pointer dereference in the syscall openexec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash...

CVE-2021-38783

CVE-2021-38783 affects the Allwinner R818 SoC Android Q SDK V1.0 camera driver, exposing /dev/cedar_dev to iotcl IOCTL_SET_PROC_INFO and IOCTL_COPY_PROC_INFO. The root cause is an out-of-bounds write in the driver, which can cause a system crash or privilege escalation. Provided documents do not ...

CVE-2021-38783

There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedardev" through iotcl cmd IOCTLSETPROCINFO and IOCTLCOPYPROCINFO, which could cause a system crash or EoP...

PT-2022-10772

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is related to an Out-of-Bound Write in the camera driver "/dev/cedar dev" through iotcl cmd IOCTL SET PROC INFO and IOCTL COPY PROC INFO, which could cause a system crash or Elevation...

CVE-2021-38784: NULL Pointer Dereference

There is a NULL pointer dereference in the syscall openexec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash...

PT-2022-10773

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is related to a NULL pointer dereference in the syscall open exec function. This could allow the execution of a malicious file, potentially causing a system crash. Recommendations For...

CVE-2021-38785: NULL Pointer Dereference

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

PT-2022-10774

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK V1.0 Description The issue is related to a NULL pointer deference in the camera driver /dev/cedar dev. This could be exploited using the ioctl cmd IOCTL GET IOMMU ADDR to cause a system crash. Recommendations F...

CVE-2021-38783: Out-of-bounds Write

There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedardev" through iotcl cmd IOCTLSETPROCINFO and IOCTLCOPYPROCINFO, which could cause a system crash or EoP...

CVE-2021-1049

Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722...

Design/Logic Flaw

Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722...

CVE-2021-1049

CVE-2021-1049 affects Android via Unisoc components (slogmodem) in the Android SoC stack. The vulnerability is classified as High severity in the NVD entry, with CVSS v3.1/3.0 impacting network-based access with likely elevation of privileges or data disclosure, per associated entries. The connec...

CVE-2021-1049

Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722...

PT-2022-9145

Name of the Vulnerable Software and Affected Versions Android SoC affected versions not specified Description A bug has been identified in Android SoC, with a HackerOne bug ID of 1343975 and an Android ID of A-204256722. Recommendations At the moment, there is no information about a newer version...

CVE-2021-1049: Undefined Security Weakness

Hacker one bug ID: 1343975Product: AndroidVersions: Android SoCAndroid ID: A-204256722...

Demystifying XDR: How Humans and Machines Join Forces in Threat Response

In our first post on demystifying the concepts and practices behind extended detection and response XDR technology, Forrester analyst Allie Mellen joined Sam Adams, Rapid7's VP for Detection and Response, to outline the basic framework for XDR and highlight the key outcomes it can help security...

What's New in InsightIDR: Q4 2021 in Review

More context and customization around detections and investigations, expanded dashboard capabilities, and more. This post offers a closer look at some of the recent releases in InsightIDR, our extended detection and response XDR solution, from Q4 2021. Over the past quarter, we delivered updates ...

PT-2021-22692

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible reinitialization of TEE due to improper locking in the mon smc load sp function of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc booting.S. This could lead to local information...

Demystifying XDR: A Forrester Analyst Lays the Foundation

Extended detection and response XDR is no longer a future state in cybersecurity practice — it's a full-fledged reality for some. In fact, it's been a thing for a lot longer than you might think. Still, XDR is new vocabulary for many security operations center SOC teams, and the contours of this...