Vulnerabilities > CVE-2021-38785 - NULL Pointer Dereference vulnerability in Allwinnertech Android Q SDK 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
allwinnertech
CWE-476

Summary

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR to cause a system crash.

Vulnerable Configurations

Part Description Count
Application
Allwinnertech
1
Hardware
Allwinnertech
1

Common Weakness Enumeration (CWE)