Buffer overflow

2023-01-2621:15:00

PRIOn knowledge base

www.prio-n.com

buffer overflow

systemloaddefaultdxe

lenovo notebook

arbitrary code execution

nvd

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

CPENameOperatorVersion
thinkbook_14-iil_firmwareeq< djcn28ww
thinkbook_14-iml_firmwareeq< cjcn38ww
thinkbook_15-iil_firmwareeq< djcn28ww
thinkbook_15-iml_firmwareeq< cjcn38ww
yoga_c640-13iml_firmwareeq< chcn28ww
yoga_c640-13iml_lte_firmwareeq< chcn28ww

Name	Operator	Version
thinkbook_14-iil_firmware	eq	< djcn28ww
thinkbook_14-iml_firmware	eq	< cjcn38ww
thinkbook_15-iil_firmware	eq	< djcn28ww
thinkbook_15-iml_firmware	eq	< cjcn38ww
yoga_c640-13iml_firmware	eq	< chcn28ww
yoga_c640-13iml_lte_firmware	eq	< chcn28ww

References

support.lenovo.com/us/en/product_security/LEN-91369