Buffer overflow

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

Buffer overflow

A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43577

CVE-2023-43577 concerns a buffer overflow in the ReFlash module of some Lenovo Desktop products, allowing a local attacker with elevated privileges to execute arbitrary code. The vulnerability is described across multiple sources as a local-privilege-elevation issue affecting Lenovo Desktops; exa...

CVE-2023-43577

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43576

CVE-2023-43576 describes a buffer overflow in the WMISwSmi module affecting Lenovo Desktop products. The vulnerability allows a local attacker with elevated privileges to execute arbitrary code, with impact on confidentiality, integrity, and availability as noted in the CVE metrics. Affected prod...

CVE-2023-43576

A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43575

A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43575

CVE-2023-43575 describes a buffer overflow in the UltraFunctionTable module of some Lenovo Desktop products, leading to a potential local privilege escalation to arbitrary code execution. The impact is described as high for confidentiality, integrity, and availability, with an attack vector limit...

CVE-2023-43575

A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43574

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...

CVE-2023-43574

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...

CVE-2023-43574

CVE-2023-43574 affects Lenovo Desktop products, with a buffer over-read in the LEMALLDriversConnectedEventHook module that may allow a local privileged attacker to disclose sensitive information. Root cause: unspecified in the documents; impact is confidentiality. Affected scope, specific version...

CVE-2023-43573

A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43573

CVE-2023-43573 affects Lenovo Desktop products via the LEMALLDriversConnectedEventHook module, where a buffer overflow could allow a local attacker with elevated privileges to execute arbitrary code. The Red Hat, NVD, and other feeds corroborate the same description of a local-privilege escalatio...

CVE-2023-43573

A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43572

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...

CVE-2023-43572

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...

CVE-2023-43581

A buffer overflow was reported in the UpdateWMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43581

CVE-2023-43581 concerns Lenovo Desktop products. The vulnerability is a buffer overflow in the Update_WMI module that could allow a local attacker with elevated privileges to execute arbitrary code. Documents confirm the affected component (Update_WMI/Update WMI module) and the impact vector is l...

CVE-2023-43581

A buffer overflow was reported in the UpdateWMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...