CVE-2021-38785

概要

参考情報

• pokerfacett/MY_CVE_CREDIT · Broken Link
• vul.wangan.com/a/CNVD-2021-49170 · Third Party Advisory
• allwinnertech.com/index.php · Product
• cnvd.org.cn/flaw/show/CNVD-2021-49170 · Third Party Advisory

android q sdk のその他の脆弱性

• CVE-2021-38789高 7.5Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, …
• CVE-2021-38788高 7.5The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. Malicious apps can use the interf…
• CVE-2021-38787高 7.5There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPAT_ION_…
• CVE-2021-38786高 7.5There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (d…
• CVE-2021-38784高 7.5There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malic…