Out of Bounds Read Vulnerabilities in Huawei Common Open Policy Service Protocol

CVE-2020-1820

Summary

Multiple out of bounds read vulnerabilities have been identified within the implementation of the Common Open Policy Service (COPS) protocol in certain Huawei products. These vulnerabilities arise due to improper handling of incoming data packets, which can lead to disruptions in service. When the decoding function processes data, it may read beyond allocated boundaries, creating potential avenues for exploitation. Successful execution of such exploits could result in service interruption on affected devices, impacting network stability and performance. The vulnerabilities are associated with multiple vulnerability IDs, underscoring the need for organizations utilizing these devices to assess their exposure and apply necessary patches as outlined in Huawei's advisory.

References