Allwinnertech Android Q Sdk — known CVE vulnerabilities

Every CVE whose affected-product data names Allwinnertech Android Q Sdk, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-38783 — CVSS 7.5 (high): There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedar_dev" through iotcl cmd…
• CVE-2021-38784 — CVSS 7.5 (high): There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a…
• CVE-2021-38785 — CVSS 7.5 (high): There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd…
• CVE-2021-38786 — CVSS 7.5 (high): There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash…
• CVE-2021-38787 — CVSS 7.5 (high): There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd…
• CVE-2021-38788 — CVSS 7.5 (high): The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. Malicious apps can use the…
• CVE-2021-38789 — CVSS 7.5 (high): Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission…