CVE-2021-38787: Allwinnertech Android Q SDK

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPAT_ION_IOC_SUNXI_FLUSH_RANGE" to cause a system crash (denial of service).

Affected products

Published 2022-01-19. Last modified 2026-06-17.