Skip to content
OpenAdvisories
High · 8.0 CVE-2018-4016 EUVD-2018-15802GHSA-3gqp-pgwc-7wgw

An exploitable code execution vulnerability exists in the URL-parsing functionality of the Roav A1 Dashcam running version RoavA1SWV1.9. A …

Published May 13, 2019 · Updated Aug 5, 2024 · Assigned by talos

Description

An exploitable code execution vulnerability exists in the URL-parsing functionality of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Anker Anker Roav A1 Dashcam RoavA1SWV1.9 —

References