writeup
Xiaomi AI Speaker Authenticated RCE III: CVE-2020-14096
This three-part writeup details the journey of finding and exploiting a vulnerability in Xiaomi AI Speaker (MICO S12A) without a physical peripheral (UART). Part III talks about a stack overflow vulnerability in MICO's signature verification process.