CVE-2018-4029

CVE-2018-4029 affects the Anker Roav A1 Dashcam (NT9665X chipset, RoavA1_SW_V1.9). The issue is in the HTTP request-parsing path (parse_http and recv_loop) of the NT9665X firmware, where repeatedly reading 0x800-byte chunks can lead to an unlimited, arbitrary write to memory via a memcpy in recv_...