Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Anker Roav A1 dashcam firmware can reboot from crafted packet

CVE-2018-4024 · published 7 years ago
Summary

The dashcam's firmware that handles thumbnail images can be triggered by a specially formed network packet to crash the software, causing the device to restart. This could interrupt video recording or monitoring until the dashcam is manually restarted. Update the dashcam firmware to the latest version or apply the vendor's patch to stop the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
anker-in roav_dashcam_a1_firmware 1.9
cpe:2.3:o:anker-in:roav_dashcam_a1_firmware:1.9:*:*:*:*:*:*:*
Original advisory text
An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially...
An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a null pointer dereference, resulting in a device reboot.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-476NULL Pointer Dereference
Timeline
Published13 May 2019
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-4024 · NVD
Track software like this
Free during beta