Buffer Overrun Vulnerability in Huawei Matebook D16 Could Lead to Code Execution

CVE-2023-52710

Summary

A buffer overflow vulnerability has been identified in the Huawei Matebook D16 specifically affecting the model CREM-WXX9 running BIOS version v2.26. The vulnerability arises from improper validation of communication buffer sizes, which can lead to unintended overlap with the start of System Management RAM (SMRAM). This situation may allow an attacker with malicious intent to manipulate the data structures stored in SMRAM, potentially facilitating unauthorized code execution in System Management Mode (SMM). Proper mitigation and updates are advised for affected users to enhance security.

References