Vulnerabilities > CVE-2021-38784 - NULL Pointer Dereference vulnerability in Allwinnertech Android Q SDK 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
allwinnertech
CWE-476

Summary

There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash.

Vulnerable Configurations

Part Description Count
Application
Allwinnertech
1
Hardware
Allwinnertech
1

Common Weakness Enumeration (CWE)