EUVD-2020-24066

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Out-of-bounds read and write vulnerability in headset products can be exploited by attackers physically.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of Huawei’s microprogrammed software lies in the fact that operations are performed outside of the buffer in memory, allowing attackers to read or write arbitrary files within the system.	2 Sep 202200:00	–	bdu_fstec
CNNVD	多款Huawei产品缓冲区错误漏洞	1 Sep 202200:00	–	cnnvd
CVE	CVE-2020-36602	20 Sep 202219:42	–	cve
Cvelist	CVE-2020-36602	20 Sep 202219:42	–	cvelist
Huawei	Security Advisory - Out-of-bounds Read and Write Vulnerability in Some Huawei Headset Products	1 Sep 202200:00	–	huawei
NVD	CVE-2020-36602	20 Sep 202220:15	–	nvd
Prion	Out-of-bounds	20 Sep 202220:15	–	prion
Positive Technologies	PT-2022-4598 · Huawei · Huawei Headset	1 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2020-36602	22 May 202517:37	–	redhatcve
Vulnrichment	CVE-2020-36602	20 Sep 202219:42	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "76820a8b-d3ac-3a76-aa8d-05a7936b4c1b",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4b6a1790-f775-39fc-a05d-b0146d92ab0d",
        "product": {
          "name": "576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD"
        },
        "product_version": "1.0.0.586-fullpackage"
      },
      {
        "id": "56991a51-2ff6-3cc5-b1fb-1a407006f86c",
        "product": {
          "name": "576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD"
        },
        "product_version": "1.0.0.577-fullpackage"
      },
      {
        "id": "5fb9be0e-ac4f-3251-97b7-46e6d1e6f019",
        "product": {
          "name": "576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD"
        },
        "product_version": "1.0.0.106,1.0.0.116,1.0.0.202,1.0.0.208,1.0.0.216,1.0.0.226,1.0.0.228,1.0.0.510,1.0.0.520,1.0.0.522,1.0.0.566,1.0.0.576,1.0.0.578,1.0.0.586,1.0.0.588,1.0.0.66(VN2-SP11),1.0.0.66(VN2-SP15),1.0.0.66(VN2-SP17),1.0.0.66(VN2-SP21),1.0.0.66(VN2-SP27),1.0.0.66(VN2-SP29),1.0.0.66(VN2-SP31),1.0.0.66(VN2-SP33),1.9.0.208,1.9.0.216,1.9.0.226,1.9.0.228,1.9.0.510,1.9.0.520,1.9.0.522,1.9.0.566,1.9.0.578,1.9.0.586,1.9.0.588"
      },
      {
        "id": "7113f7b7-4b8b-3358-88eb-bb9d80e1b6c0",
        "product": {
          "name": "576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD"
        },
        "product_version": "1.0.0.606-fullpackage"
      },
      {
        "id": "8895b8e2-6c4b-3059-b907-b9c2e3250514",
        "product": {
          "name": "576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD"
        },
        "product_version": "1.0.0.576-fullpackage"
      },
      {
        "id": "89d4e038-d7a6-3304-8143-1760812ee679",
        "product": {
          "name": "576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD"
        },
        "product_version": "1.0.0.1,1.0.0.2,1.0.0.3,1.0.0.4,1.0.0.5"
      },
      {
        "id": "9cbdfe69-f4c7-3b56-ad91-14de19b10765",
        "product": {
          "name": "576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD"
        },
        "product_version": "1.0.0.581-fullpackage"
      },
      {
        "id": "b19d5637-00d3-34e6-b15d-d604d3b02926",
        "product": {
          "name": "576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD"
        },
        "product_version": "1.0.0.588-fullpackage"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20220826-01-outofboundread-en
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

EPSS0.00261

SSVC