Collin Liu

**GHOST Vulnerability (CVE‑2015‑0235) – Sole Fixer & Compliance Lead What it was A 15‑year‑old heap buffer overflow in glibc (gethostbyname function). CVSS 10.0 – remote code execution, no credentials needed. Affected every Linux device globally. Why it was a business emergency Huawei's entire hardware portfolio (servers, switches, routers) ran on vulnerable glibc. **No fix = no security compliance = no sales.** What I did (solely) - Manually backported the patch to multiple glibc versions across all affected product lines - Delivered hardened binaries and remediation guides before compliance deadlines - Enabled every product to pass third‑party security audits and customer reviews Impact - Unlocked global hardware sales – avoided the "blocked from market" scenario - Prevented multi‑million‑dollar recall / customer compensation - Protected Huawei's "trustworthy security" reputation in global markets Why this matters now This is why I understand the real business value of security compliance. When I talk to enterprise customers today, I know exactly what keeps their CIOs and procurement leaders up at night – because I've been the one who fixed it. --------------------------------------------------------------------------------- References 🔗 - NVD CVE‑2015‑0235: https://nvd.nist.gov/vuln/detail/CVE-2015-0235 - Huawei official security advisory: https://www.huawei.com/en/psirt/security-advisories/2015/hw-412885