High severity7.8NVD Advisory· Published May 28, 2024· Updated Jun 17, 2026

CVE-2023-52548

Description

Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRAM memory and, in turn, lead to code execution in SMM

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Huawei/Curiem Wfg9b Firmware2 versions
cpe:2.3:o:huawei:curiem-wfg9b_firmware:ota-curiem-b-bios-2.28:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:huawei:curiem-wfg9b_firmware:ota-curiem-b-bios-2.28:*:*:*:*:*:*:*
- (no CPE)range: OTA-CurieM-B-BIOS-2.28
Huawei/Matebook D16llm-fuzzy
Range: BIOS v2.26

Patches

Vulnerability mechanics

References

www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cnnvdVendor Advisory
www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-ennvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000