CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2023-01-05

Last modified

2025-04-08

Weaknesses

CWE-125, CWE-126

Affected products

• Thinkpad X13s (Lenovo)
• Thinkpad X13s Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-103709