CVE-2020-36602

Name of the Vulnerable Software and Affected Versions Huawei headset products (affected versions not specified)

Description The issue concerns an out-of-bounds read and write vulnerability. An attacker, with physical access to the device, can craft a malformed message with a specific parameter and send it to the affected products. Due to insufficient validation of the message, this may be exploited to cause out-of-bounds read and write, potentially allowing the attacker to read or write arbitrary files in the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.