CVE-2023-52712

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory, thus potentially leading code execution in SMM

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
May 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-527137.7Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affCVE-2023-527147.5Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affCVE-2023-527157.5The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability may affect availabilCVE-2023-527167.5Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful exploitation of this vCVE-2023-527175.3Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will affect availabilCVE-2023-527188.1A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or infoCVE-2023-527195.5Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentialitCVE-2023-52728.8A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. This affects an unknown part of CVE-2023-527204.1Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-527215.5The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confideCVE-2023-527225.5An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the TypeCVE-2023-527237.1In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is acciden
CVE-2023-52712: High severity, CVSS 7.8 | Vulnix