CVE-2022-1890

🗓️ 23 Jan 2023 15:18:46Reported by lenovoType

Buffer overflow in Lenovo Notebook ReadyBootDxe driver allows local privilege escalatio

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the ReadyBootDxe driver of Lenovo notebook microprogramming software allows a hacker to execute arbitrary code.	15 Jul 202200:00	–	bdu_fstec
Circl	CVE-2022-1890	14 Jul 202209:33	–	circl
CNNVD	Lenovo Notebook 缓冲区错误漏洞	26 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-1890	23 Jan 202315:18	–	cvelist
EUVD	EUVD-2022-25162	3 Oct 202520:07	–	euvd
Lenovo	Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US	8 Jul 202213:50	–	lenovo
NVD	CVE-2022-1890	26 Jan 202321:15	–	nvd
OSV	CVE-2022-1890	26 Jan 202321:15	–	osv
Prion	Buffer overflow	26 Jan 202321:15	–	prion
Positive Technologies	PT-2022-3641 · Lenovo · Readybootdxe	12 Jul 202200:00	–	ptsecurity

NVD

Vulners

Node

lenovo thinkbook_14-iml_firmwareRange<cjcn38ww

AND

lenovo thinkbook_14-imlMatch-

Node

lenovo thinkbook_14-iil_firmwareRange<djcn28ww

AND

lenovo thinkbook_14-iilMatch-

Node

lenovo thinkbook_15-iil_firmwareRange<djcn28ww

AND

lenovo thinkbook_15-iilMatch-

Node

lenovo thinkbook_15-iml_firmwareRange<cjcn38ww

AND

lenovo thinkbook_15-imlMatch-

Node

lenovo yoga_c640-13iml_lte_firmwareRange<chcn28ww

AND

lenovo yoga_c640-13iml_lteMatch-

Node

lenovo yoga_c640-13iml_firmwareRange<chcn28ww

AND

lenovo yoga_c640-13imlMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-91369

17 Jun 2026 04:23Current

8High risk

Vulners AI Score8

CVSS 3.16.7 - 7.8

EPSS0.00342

SSVC