CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2023-01-05

Last modified

2025-04-10

Weaknesses

CWE-125, CWE-126

Affected products

• Thinkpad X13s (Lenovo)
• Thinkpad X13s Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-103709