CVE-2023-52547

Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of SMRAM and can potentially lead to code execution in SMM.

Score
CVSS 3.1 7.8 High
Status
Analyzed - psirt@huawei.com
Published
2024-05-28
Last modified
2024-08-02
Weaknesses
CWE-130, CWE-787

Affected products

References