10.0
Critical
CVE-2018-4029 An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset…
Description
An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an unlimited and arbitrary write to memory, resulting in code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Novatek | Versions not published |
Other CVEs of Novatek
The 8 CVEs of Novatek →
CVE-2018-4024
An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset…
7.5
High
CVE-2018-4027
An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset…
5.3
Medium
CVE-2018-4028
An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1…
5.3
Medium
CVE-2018-4018
An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam…
10.0
Critical