CVE-2021-38786: Allwinnertech Android Q SDK

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service).

Affected products

• Allwinnertech Android Q SDK: version 1.0 only

Published 2022-01-19. Last modified 2026-06-17.