CVE-2018-4024

CVE-2018-4024 is a documented DoS in the Novatek NT9665X chipset firmware used by the Anker Roav A1 Dashcam (RoavA1_SW_V1.9). The vulnerability stems from the XML_GetThumbNail command path where, if an EXIF path lacks data, the code dereferences a null buffer via Movie_GetTempBuffer, causing a de...