CVE-2022-1891
A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - psirt@lenovo.com
- Published
- 2023-01-26
- Last modified
- 2025-04-03
- Weaknesses
- CWE-120, CWE-122
Affected products
- Bios (Lenovo)
- Thinkbook 14-iil Firmware (Lenovo)
- Thinkbook 14-iml Firmware (Lenovo)
- Thinkbook 15-iil Firmware (Lenovo)
- Thinkbook 15-iml Firmware (Lenovo)
- Yoga C640-13iml Firmware (Lenovo)
- Yoga C640-13iml Lte Firmware (Lenovo)
References
- https://support.lenovo.com/us/en/product_security/LEN-91369
