Vulnerabilities > CVE-2018-4029 - Out-of-bounds Write vulnerability in Anker-In Roav Dashcam A1 Firmware 1.9

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
anker-in
CWE-787
critical
NVD
Published: 2019-05-13
Updated: 2024-11-21

Summary

An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an unlimited and arbitrary write to memory, resulting in code execution.

Vulnerable Configurations

Part Description Count
OS
Anker-In
1
Hardware
Anker-In
1

Common Weakness Enumeration (CWE)

Talos

idTALOS-2018-0701
last seen2019-05-29
published2019-05-13
reporterTalos Intelligence
sourcehttp://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0701
titleNovatek NT9665X HFS Recv buffer overflow code execution vulnerability

References