Memory Corruption in SMI Handler of HddPassword SMM Module Affects Huawei Matebook D16

CVE-2023-52547

What is CVE-2023-52547?

A memory corruption vulnerability exists within the System Management Interrupt (SMI) handler of the HddPassword System Management Mode (SMM) module in Huawei Matebook D16, specifically in model CREM-WXX9 with BIOS version v2.26. This issue could allow an attacker with malicious OS capabilities to alter data structures stored at the beginning of the System Management RAM (SMRAM). Exploitation of this vulnerability has the potential for unauthorized code execution in SMM, posing risks to system integrity and data security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References