CVE-2026-52656

CRITICAL9.8

An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an attacker to execute arbitrary code via a crafted FEX file

Published Jul 20, 2026

Modified 2 months ago

Details

An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an attacker to execute arbitrary code via a crafted FEX file

References

WEB

https://keowu.re/posts/Lelouch--Reverse-Engineering-of-an-SJCAM-Action-Camera-with-proprietary-Android--based-firmware-and-Rewriting-a-completely-OpenSource-CFW

WEB

https://sjcam.com

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-52656

CVSS Analysis

CVSS v3.1

9.8

Exploitability

Attack Vector