Allwinner vulnerabilities
5 vulnerabilities
Known vulnerabilities in Allwinner products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- A643 vulnerabilities
- H6161 vulnerabilities
- Linux 3.4 Sunxi1 vulnerabilities
CVE-2016-10225allwinnerlinux-3.4-sunxi
EPSS score3.95%
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxi_debug/sunxi_debug.CVE-2017-5927allwinnera64+19EPSS score1.58%
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.CVE-2017-5925allwinnera64+19EPSS score1.58%
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.CVE-2017-5926allwinnera64+19EPSS score1.58%
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.CVE-2026-58378allwinnerh616EPSS score0.44%
Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.