Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-52710

Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26), As the communication buffer size hasn’t been properly validated to be of the expected size, it can partially overlap with the beginning SMRAM.This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of SMRAM and can potentially lead to code execution in SMM.

Published

2024-05-28T07:15:10.100

Last Modified

2025-01-17T18:32:39.963

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-754
  • Type: Primary
    CWE-754
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei curiem-wfg9b_firmware ota-curiem-bios-2.29 Yes
Hardware huawei curiem-wfg9b - No
References