The issue concerns an out-of-bounds read and write vulnerability. An attacker, with physical access to the device, can craft a malformed message with a specific parameter and send it to the affected products. Due to insufficient validation of the message, this may be exploited to cause out-of-bounds read and write, potentially allowing the attacker to read or write arbitrary files in the system.