Vulnerabilities > CVE-2021-38783 - Out-of-bounds Write vulnerability in Allwinnertech Android Q SDK 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
allwinnertech
CWE-787

Summary

There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedar_dev" through iotcl cmd IOCTL_SET_PROC_INFO and IOCTL_COPY_PROC_INFO, which could cause a system crash or EoP.

Vulnerable Configurations

Part Description Count
Application
Allwinnertech
1
Hardware
Allwinnertech
1

Common Weakness Enumeration (CWE)