Buffer overflow

2023-08-1717:15:00

PRIOn knowledge base

www.prio-n.com

buffer overflow

lenovo

setuputility

driver

nvd

local access

elevated privileges

arbitrary code

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

CPENameOperatorVersion
legion_5_15iah7_firmwareeq< j2cn51ww
legion_5_15iah7h_firmwareeq< j2cn51ww
legion_5_pro_16iah7_firmwareeq< j2cn51ww
legion_5_pro_16iah7h_firmwareeq< j2cn51ww
legion_pro_5_16irx8_firmwareeq< kwcn37ww
legion_pro_7_16irx8_firmwareeq< kwcn37ww
legion_pro_7_16irx8h_firmwareeq< kwcn37ww

Name	Operator	Version
legion_5_15iah7_firmware	eq	< j2cn51ww
legion_5_15iah7h_firmware	eq	< j2cn51ww
legion_5_pro_16iah7_firmware	eq	< j2cn51ww
legion_5_pro_16iah7h_firmware	eq	< j2cn51ww
legion_pro_5_16irx8_firmware	eq	< kwcn37ww
legion_pro_7_16irx8_firmware	eq	< kwcn37ww
legion_pro_7_16irx8h_firmware	eq	< kwcn37ww

References

support.lenovo.com/us/en/product_security/LEN-134879