CVE-2018-4025

An exploitable denial-of-service vulnerability exists in the XML_GetRawEncJpg Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause an invalid memory dereference, resulting in a device reboot.

Score

CVSS 3.1 7.5 High

Status

Modified - talos-cna@cisco.com

Published

2019-05-13

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Roav Dashcam A1 Firmware (Anker-in)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0697