Tomofun Furbo 360 Race Condition Vulnerability in Audio Handler Component

A race condition vulnerability has been identified in the Tomofun Furbo 360 camera, specifically in versions up to FB0035_FW_036. The issue arises within an unknown function of the Audio Handler component, where improper synchronization allows for concurrent code execution that can disrupt the device's audio playback. This vulnerability can be exploited remotely, and an attacker with access to a victim's account could send multiple treat toss commands simultaneously, causing a temporary audio failure that persists until the device is rebooted.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition on the device's audio playback, requiring a reboot to restore functionality.