CVE-2021-38788

 

Published at: - 19-01-2022 05:15

Last modified: - 26-01-2022 06:16

Total changes: - 2

Description

The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. Malicious apps can use the interface provided by the service to set the number of applications allowed to run in the background to 0 and add themselves to the whitelist, so that once other applications enter the background, they will be forcibly stopped by the system, causing a denial of service.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://www.allwinnertech.com/index.php?c=product&a=index&id=92
• https://vul.wangan.com/a/CNVD-2021-46928
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-46928
• https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9Abackground%20service%20has%20EoP%20Vulnerability.md

 

Keywords

NVD

 

CVE-2021-38788

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures