Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/6a5a8f0a9740f865693d5aa97a42cc4504538e18 - https://git.kernel.org/stable/c/c955751cbf864cf2055117dd3fe7f780d2a57b56 - https://git.kernel.org/stable/c/75a5221630fe5aa3fedba7a06be618db0f79ba1e
CVE ID: CVE-2023-52527 State: PUBLISHED Published: 2024-03-02T21:52:32.890Z Last Updated: 2025-05-04T07:38:37.636Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() Including the transhdrlen in length is a problem when the packet is partially filled (e.g. something like send(MSG_MORE) happened previously) when appending to an IPv4 or IPv6 packet as we don't want to repeat the transport header or account for it twice. This can happen under some circumstances, such as splicing into an L2TP socket. The symptom observed is a warning in __ip6_append_data(): WARNING: CPU:
umstances, such as splicing into an L2TP socket. The symptom observed is a warning in __ip6_append_data(): WARNING: CPU: 1 PID: 5042 at net/ipv6/ip6_output.c:1800 __ip6_append_data.isra.0+0x1be8/0x47f0 net/ipv6/ip6_output.c:1800 that occurs when MSG_SPLICE_PAGES is used to append more data to an already partially occupied skbuff. The warning occurs when 'copy' is larger than the amount of data in the message iterator. This is because the requested length includes the transport header length when it shouldn't. This can be triggered by, for example: sfd = socket(AF_INET6, SOCK_DGRAM, IPPROTO_L2TP); bind(sfd, ...); // ::1 connect(sfd, ...); // ::1 port 7 send(sfd, buffer, 4100, MSG_MORE); sendf
K_DGRAM, IPPROTO_L2TP); bind(sfd, ...); // ::1 connect(sfd, ...); // ::1 port 7 send(sfd, buffer, 4100, MSG_MORE); sendfile(sfd, dfd, NULL, 1024); Fix this by only adding transhdrlen into the length if the write queue is empty in l2tp_ip6_sendmsg(), analogously to how UDP does things. l2tp_ip_sendmsg() looks like it won't suffer from this problem as it builds the UDP packet itself. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7626b9fed53092aa2147978070e610ecb61af844 - https://git.kernel.org/stable/c/559d697c5d072593d22b3e0bd8b8081108aeaf59 - https://git.kernel.org/stable/c/1fc793d68d50dee4782ef2e808913d5dd880bcc6 -
c/559d697c5d072593d22b3e0bd8b8081108aeaf59 - https://git.kernel.org/stable/c/1fc793d68d50dee4782ef2e808913d5dd880bcc6 - https://git.kernel.org/stable/c/96b2e1090397217839fcd6c9b6d8f5d439e705ed - https://git.kernel.org/stable/c/cd1189956393bf850b2e275e37411855d3bd86bb - https://git.kernel.org/stable/c/f6a7182179c0ed788e3755ee2ed18c888ddcc33f - https://git.kernel.org/stable/c/fe80658c08e3001c80c5533cd41abfbb0e0e28fd - https://git.kernel.org/stable/c/9d4c75800f61e5d75c1659ba201b6c0c7ead3070
CVE ID: CVE-2023-52528 State: PUBLISHED Published: 2024-03-02T21:52:33.554Z Last Updated: 2025-05-04T07:38:38.847Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the following uninit-value access issue: ===================================================== BUG: KMSAN: uninit-value in smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline] BUG: KMSAN: uninit-value in smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482 CPU: 0 PID: 8696 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google
CPU: 0 PID: 8696 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: usb_hub_wq hub_event Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x21c/0x280 lib/dump_stack.c:118 kmsan_report+0xf7/0x1e0 mm/kmsan/kmsan_report.c:121 __msan_warning+0x58/0xa0 mm/kmsan/kmsan_instr.c:215 smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:975 [inline] smsc75xx_bind+0x5c9/0x11e0 drivers/net/usb/smsc75xx.c:1482 usbnet_probe+0x1152/0x3f90 drivers/net/usb/usbnet.c:1737 usb_probe_interface+0xece/0x1550 drivers/usb/core/driver.c:374 really_probe+0xf20/0x20b0 drivers/base/dd.c:529 driver_probe_device
interface+0xece/0x1550 drivers/usb/core/driver.c:374 really_probe+0xf20/0x20b0 drivers/base/dd.c:529 driver_probe_device+0x293/0x390 drivers/base/dd.c:701 __device_attach_driver+0x63f/0x830 drivers/base/dd.c:807 bus_for_each_drv+0x2ca/0x3f0 drivers/base/bus.c:431 __device_attach+0x4e2/0x7f0 drivers/base/dd.c:873 device_initial_probe+0x4a/0x60 drivers/base/dd.c:920 bus_probe_device+0x177/0x3d0 drivers/base/bus.c:491 device_add+0x3b0e/0x40d0 drivers/base/core.c:2680 usb_set_configuration+0x380f/0x3f10 drivers/usb/core/message.c:2032 usb_generic_driver_probe+0x138/0x300 drivers/usb/core/generic.c:241 usb_probe_device+0x311/0x490 drivers/usb/core/driver.c:272 really_probe+0xf20/0x20b0 drivers/ba
s/usb/core/generic.c:241 usb_probe_device+0x311/0x490 drivers/usb/core/driver.c:272 really_probe+0xf20/0x20b0 drivers/base/dd.c:529 driver_probe_device+0x293/0x390 drivers/base/dd.c:701 __device_attach_driver+0x63f/0x830 drivers/base/dd.c:807 bus_for_each_drv+0x2ca/0x3f0 drivers/base/bus.c:431 __device_attach+0x4e2/0x7f0 drivers/base/dd.c:873 device_initial_probe+0x4a/0x60 drivers/base/dd.c:920 bus_probe_device+0x177/0x3d0 drivers/base/bus.c:491 device_add+0x3b0e/0x40d0 drivers/base/core.c:2680 usb_new_device+0x1bd4/0x2a30 drivers/usb/core/hub.c:2554 hub_port_connect drivers/usb/core/hub.c:5208 [inline] hub_port_connect_change drivers/usb/core/hub.c:5348 [inline] port_event drivers/usb/core/
s/usb/core/hub.c:5208 [inline] hub_port_connect_change drivers/usb/core/hub.c:5348 [inline] port_event drivers/usb/core/hub.c:5494 [inline] hub_event+0x5e7b/0x8a70 drivers/usb/core/hub.c:5576 process_one_work+0x1688/0x2140 kernel/workqueue.c:2269 worker_thread+0x10bc/0x2730 kernel/workqueue.c:2415 kthread+0x551/0x590 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:293 Local variable ----buf.i87@smsc75xx_bind created at: __smsc75xx_read_reg drivers/net/usb/smsc75xx.c:83 [inline] smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:968 [inline] smsc75xx_bind+0x485/0x11e0 drivers/net/usb/smsc75xx.c:1482 __smsc75xx_read_reg drivers/net/usb/smsc75xx.c:83 [inline] smsc75xx_wait_re
0x485/0x11e0 drivers/net/usb/smsc75xx.c:1482 __smsc75xx_read_reg drivers/net/usb/smsc75xx.c:83 [inline] smsc75xx_wait_ready drivers/net/usb/smsc75xx.c:968 [inline] smsc75xx_bind+0x485/0x11e0 drivers/net/usb/smsc75xx.c:1482 This issue is caused because usbnet_read_cmd() reads less bytes than requested (zero byte in the reproducer). In this case, 'buf' is not properly filled. This patch fixes the issue by returning -ENODATA if usbnet_read_cmd() reads less bytes than requested. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3e0af6eec1789fd11934164a7f4dbcad979855a4 - https://git.kernel.org/stable/c/2a36d9e2995c8c3c3f179aa
t.kernel.org/stable/c/3e0af6eec1789fd11934164a7f4dbcad979855a4 - https://git.kernel.org/stable/c/2a36d9e2995c8c3c3f179aab1215a69cff06cbed - https://git.kernel.org/stable/c/310f1c92f65ad905b7e81fe14de82d979ebbd825 - https://git.kernel.org/stable/c/30bc4d7aebe33904b0f2d3aad4b4a9c6029ad0c5 - https://git.kernel.org/stable/c/cda10784a176d7192f08ecb518f777a4e9575812 - https://git.kernel.org/stable/c/9ffc5018020fe646795a8dc1203224b8f776dc09 - https://git.kernel.org/stable/c/4931e80da9463b03bfe42be54a9a19f213b0f76d - https://git.kernel.org/stable/c/e9c65989920f7c28775ec4e0c11b483910fb67b8
CVE ID: CVE-2023-52529 State: PUBLISHED Published: 2024-03-02T21:52:34.217Z Last Updated: 2025-05-07T20:02:11.789Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sony_probe() If an error occurs after a successful usb_alloc_urb() call, usb_free_urb() should be called. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/bb0707fde7492121917fd9ddb43829e96ec0bb9e - https://git.kernel.org/stable/c/f237b17611fa3501f43f12d1cb64323e10fdcb4f - https://git.kernel.org/stable/c/f566efa7de1e35e6523f4acbaf85068a540be07d - https://gi
11fa3501f43f12d1cb64323e10fdcb4f - https://git.kernel.org/stable/c/f566efa7de1e35e6523f4acbaf85068a540be07d - https://git.kernel.org/stable/c/e1cd4004cde7c9b694bbdd8def0e02288ee58c74
CVE ID: CVE-2023-52530 State: PUBLISHED Published: 2024-03-02T21:52:34.966Z Last Updated: 2025-11-03T20:36:15.265Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by ieee80211_gtk_rekey_add() but returns 0 due to KRACK protection (identical key reinstall), ieee80211_gtk_rekey_add() will still return a pointer into the key, in a potential use-after-free. This normally doesn't happen since it's only called by iwlwifi in case of WoWLAN rekey offload which has its own KRACK protection, but still better to fix, do that by returning an error code and
oWLAN rekey offload which has its own KRACK protection, but still better to fix, do that by returning an error code and converting that to success on the cfg80211 boundary only, leaving the error for bad callers of ieee80211_gtk_rekey_add(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2408f491ff998d674707725eadc47d8930aced09 - https://git.kernel.org/stable/c/e8e599a635066c50ac214c3e10858f1d37e03022 - https://git.kernel.org/stable/c/e8a834eb09bb95c2bf9c76f1a28ecef7d8c439d0 - https://git.kernel.org/stable/c/2f4e16e39e4f5e78248dd9e51276a83203950b36 - https://git.kernel.org/stable/c/65c72a7201704574dace708cbc96a8f367b1
stable/c/2f4e16e39e4f5e78248dd9e51276a83203950b36 - https://git.kernel.org/stable/c/65c72a7201704574dace708cbc96a8f367b1491d - https://git.kernel.org/stable/c/31db78a4923ef5e2008f2eed321811ca79e7f71b
CVE ID: CVE-2023-52531 State: PUBLISHED Published: 2024-03-02T21:52:35.664Z Last Updated: 2025-05-04T07:38:42.739Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, space is kzalloc()'ed for: sizeof(struct iwl_nvm_data) + sizeof(struct ieee80211_channel) + sizeof(struct ieee80211_rate) 'mvm->nvm_data' is a 'struct iwl_nvm_data', so it is fine. At the end of this structure, there is the 'channels' flex array. Each element is of type 'struct ieee80211_channel'. So only 1 element is allocated in this array. When doing: mvm->nvm_data->bands[0].channels = mvm->nvm_dat
0211_channel'. So only 1 element is allocated in this array. When doing: mvm->nvm_data->bands[0].channels = mvm->nvm_data->channels; We point at the first element of the 'channels' flex array. So this is fine. However, when doing: mvm->nvm_data->bands[0].bitrates = (void *)((u8 *)mvm->nvm_data->channels + 1); because of the "(u8 *)" cast, we add only 1 to the address of the beginning of the flex array. It is likely that we want point at the 'struct ieee80211_rate' allocated just after. Remove the spurious casting so that the pointer arithmetic works as expected. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7c8faa310
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7c8faa31080342aec4903c9acb20caf82fcca1ef - https://git.kernel.org/stable/c/6b3223449c959a8be94a1f042288059e40fcccb0 - https://git.kernel.org/stable/c/f06cdd8d4ba5252986f51f80cc30263636397128 - https://git.kernel.org/stable/c/8ba438ef3cacc4808a63ed0ce24d4f0942cfe55d
CVE ID: CVE-2023-52532 State: PUBLISHED Published: 2024-03-02T21:52:36.292Z Last Updated: 2025-05-04T07:38:44.093Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type (probably from a newer hardware), still free the SKB, update the queue tail, etc., otherwise the accounting will be wrong. Also, TX errors can be triggered by injecting corrupted packets, so replace the WARN_ONCE to ratelimited error logging. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b67d7b1bfc46d05c1a58b172516454698e8d50
nrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b67d7b1bfc46d05c1a58b172516454698e8d5004 - https://git.kernel.org/stable/c/a910e0f6304726da30a212feecec65cb97ff7a80 - https://git.kernel.org/stable/c/b2b000069a4c307b09548dc2243f31f3ca0eac9c
CVE ID: CVE-2023-52533 State: PUBLISHED Published: 2024-04-08T02:21:39.692Z Last Updated: 2025-03-13T13:35:19.731Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1777148475750809602
CVE ID: CVE-2023-52534 State: PUBLISHED Published: 2024-04-08T02:21:39.957Z Last Updated: 2024-11-05T19:52:32.834Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1777148475750809602
CVE ID: CVE-2023-52535 State: PUBLISHED Published: 2024-04-08T02:21:40.221Z Last Updated: 2024-09-06T22:04:32.854Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T610/T618 Description: In vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1777148475750809602
CVE ID: CVE-2023-52536 State: PUBLISHED Published: 2024-04-08T02:21:40.495Z Last Updated: 2025-03-26T20:26:39.654Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1777148475750809602
CVE ID: CVE-2023-52537 State: PUBLISHED Published: 2024-04-08T08:40:37.167Z Last Updated: 2024-08-02T23:03:20.899Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52538 State: PUBLISHED Published: 2024-04-08T08:43:01.514Z Last Updated: 2025-03-25T13:39:28.794Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52539 State: PUBLISHED Published: 2024-04-08T08:45:14.929Z Last Updated: 2024-08-15T16:22:11.397Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration Description: Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52540 State: PUBLISHED Published: 2024-04-08T08:46:23.790Z Last Updated: 2025-03-28T20:40:12.716Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52541 State: PUBLISHED Published: 2024-04-08T08:47:29.919Z Last Updated: 2024-10-31T15:05:06.846Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52542 State: PUBLISHED Published: 2024-04-08T08:48:33.106Z Last Updated: 2024-12-06T20:31:53.760Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52543 State: PUBLISHED Published: 2024-04-08T08:49:44.807Z Last Updated: 2024-11-07T16:03:30.857Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52544 State: PUBLISHED Published: 2024-04-08T08:52:13.485Z Last Updated: 2024-11-04T14:37:45.737Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-22 Description: Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52545 State: PUBLISHED Published: 2024-04-08T08:53:09.751Z Last Updated: 2024-08-26T16:51:53.780Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52546 State: PUBLISHED Published: 2024-04-08T08:54:05.956Z Last Updated: 2025-03-28T19:19:25.156Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52547 State: PUBLISHED Published: 2024-05-28T06:15:20.883Z Last Updated: 2024-08-02T23:03:20.821Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: CurieM-WFG9B Problem Types: CWE-130 Description: Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of SMRAM and can potentially lead to code execution in SMM. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-iholpiiahpp
t: - CVE Program Container: References: - https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-iholpiiahpp-0ab7d6db-en
CVE ID: CVE-2023-52548 State: PUBLISHED Published: 2024-05-28T06:16:48.525Z Last Updated: 2024-08-02T23:03:21.170Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: CurieM-WFG9B Problem Types: CWE-119 Description: Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRAM memory and, in turn, lead to code execution in SMM Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cn
ontainer: References: - https://www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cn - https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-en
CVE ID: CVE-2023-52549 State: PUBLISHED Published: 2024-04-08T08:55:11.618Z Last Updated: 2024-08-02T23:03:20.815Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-120 Description: Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725
CVE ID: CVE-2023-52550 State: PUBLISHED Published: 2024-04-08T08:56:22.568Z Last Updated: 2024-08-20T19:34:53.596Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-120 Description: Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/3/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725