PT-2022-10777 · Google+1 · Android Q Sdk+1

Published 2022-01-19 · Updated 2022-07-12 · CVE-2021-38788

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Allwinner R818 SoC Android Q SDK version V1.0

Description The Background service in the affected software is used to manage background applications. Malicious apps can exploit the interface provided by this service to set the number of applications allowed to run in the background to 0 and add themselves to the whitelist. This results in other applications being forcibly stopped by the system once they enter the background, causing a denial of service.

Recommendations For Allwinner R818 SoC Android Q SDK version V1.0, consider restricting access to the Background service interface to prevent malicious apps from manipulating the background application settings. As a temporary workaround, review and monitor the whitelist for any suspicious additions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2021-38788

Affected Products

Allwinner R818 Soc

Android Q Sdk

References · 7

• 🔥 https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9Abackground%20service%20has%20EoP%20Vulnerability.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-38788 · Security Note
• https://allwinnertech.com/index.php?c=product&a=index&id=92 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-38788 · Vendor Advisory
• https://cnvd.org.cn/flaw/show/CNVD-2021-46928 · Note
• https://t.me/cibsecurity/35872 · Telegram Post
• https://vul.wangan.com/a/CNVD-2021-46928 · Note