CVE-2023-52548

Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRAM memory and, in turn, lead to code execution in SMM

Score

CVSS 3.1 7.8 High

Status

Analyzed - psirt@huawei.com

Published

2024-05-28

Last modified

2024-08-02

Weaknesses

CWE-119, CWE-787

Affected products

• Curiem-wfg9b (Huawei)
• Curiem-wfg9b Firmware (Huawei)

References

• https://www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cn
• https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-en