CVE-2018-4026

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An exploitable denial-of-service vulnerability exists in the XML_GetScreen Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted set of packets can cause an invalid memory dereference, resulting in a device reboot.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-754

Affected software

No affected versions have been published.

Timeline

Published
May 13, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-40277.5An exploitable denial-of-service vulnerability exists in the XML_UploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the AnCVE-2018-40287.5An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav A1 Dashcam, version RoavA1SWV1CVE-2018-40299.8An exploitable code execution vulnerability exists in the HTTP request-parsing function of the NT9665X Chipset firmware running on the AnkerCVE-2018-40307.5An exploitable vulnerability exists the safe browsing function of the CUJO Smart Firewall, version 7003. The bug lies in the way the safe brCVE-2018-403110.0An exploitable vulnerability exists in the safe browsing function of the CUJO Smart Firewall, version 7003. The flaw lies in the way the safCVE-2018-40325.5An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with CVE-2018-40335.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with locaCVE-2018-40345.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attackCVE-2018-40355.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attackCVE-2018-40365.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with locaCVE-2018-40375.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with locaCVE-2018-40387.8An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, whil
CVE-2018-4026: High severity, CVSS 7.5 | Vulnix