Vulnerabilities > CVE-2021-38786 - NULL Pointer Dereference vulnerability in Allwinnertech Android Q SDK 1.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
allwinnertech
CWE-476

Summary

There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service).

Vulnerable Configurations

Part Description Count
Application
Allwinnertech
1
Hardware
Allwinnertech
1

Common Weakness Enumeration (CWE)