Buffer overflow

2023-11-0823:15:00

PRIOn knowledge base

www.prio-n.com

lenovo

biosextensionloader

buffer overflow

arbitrary code

nvd

local attacker

elevated privileges

8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CPENameOperatorVersion
ideacentre_3-07ada05_firmwareeq< o4fkt39a
ideacentre_3-07imb05_firmwareeq< m2vkt21a
ideacentre_5-14imb05_firmwareeq< o4hkt3ca
ideacentre_5-14iob6_firmwareeq< m3gkt3da
ideacentre_5_14iab7_firmwareeq< m42kt46a
ideacentre_5_14irb8_firmwareeq< m4ukt36a
ideacentre_aio_3-22iil5_firmwareeq< o56kt24a
ideacentre_aio_3-22imb05_firmwareeq< o4rkt31a
ideacentre_aio_3-22itl6_firmwareeq< o5akt34a
ideacentre_aio_3-24alc6_firmwareeq< o5bkt25a

Name	Operator	Version
ideacentre_3-07ada05_firmware	eq	< o4fkt39a
ideacentre_3-07imb05_firmware	eq	< m2vkt21a
ideacentre_5-14imb05_firmware	eq	< o4hkt3ca
ideacentre_5-14iob6_firmware	eq	< m3gkt3da
ideacentre_5_14iab7_firmware	eq	< m42kt46a
ideacentre_5_14irb8_firmware	eq	< m4ukt36a
ideacentre_aio_3-22iil5_firmware	eq	< o56kt24a
ideacentre_aio_3-22imb05_firmware	eq	< o4rkt31a
ideacentre_aio_3-22itl6_firmware	eq	< o5akt34a
ideacentre_aio_3-24alc6_firmware	eq	< o5bkt25a

Rows per page:

1-10 of 811

References

support.lenovo.com/us/en/product_security/LEN-141775