Out-of-Bounds Read Vulnerabilities in Huawei Common Open Policy Service

CVE-2020-1818

Summary

Multiple out-of-bounds read vulnerabilities exist in the implementation of the Common Open Policy Service (COPS) protocol found in various Huawei products. When processing incoming data packets, the specific decoding function may allow for out-of-bounds reads, leading to potential service disruptions on affected devices. Successful exploitation of these vulnerabilities can result in serious operational issues, making it crucial for users of the impacted Huawei network devices to apply appropriate security measures promptly. Huawei has designated several identification numbers for these vulnerabilities, which highlights the urgency of the situation.

References