CVE-2021-38788

CVE-2021-38788 describes a denial-of-service vulnerability in the Background service of the Allwinner R818 SoC Android Q SDK V1.0. Malicious applications can exploit this by manipulating the service's interface to set the background application limit to zero and whitelist themselves, forcibly terminating other background apps. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low complexity, leading to a complete denial of service for legitimate applications. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.