CVE-2023-52548

CVSS V2 None CVSS V3 None

Description

Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRAM memory and, in turn, lead to code execution in SMM

Overview

CVE ID
CVE-2023-52548

Assigner
huawei

Vulnerability Status
PUBLISHED

Published Version
2024-05-28T06:16:48.525Z

Last Modified Date
2024-05-28T06:30:39.625Z

Weakness Enumerations

CWE	URL
CWE-119	http://cwe.mitre.org/data/definitions/119.html

References

Reference URL	Reference Tags
https://www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cn
https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-en

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-52548
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52548

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 15:12:19				Added to TrackCVE