CVE-2023-43567

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43573: Buffer Copy without Checking Size of Input

A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43581: Buffer Copy without Checking Size of Input

A buffer overflow was reported in the UpdateWMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

PT-2023-28863 · Lenovo · Lenovo Desktop

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the UltraFunctionTable module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the...

PT-2023-28862 · Lenovo · Lenovo Desktop

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer over-read was reported in the LEMALLDriversConnectedEventHook module that may allow a local attacker with elevated privileges to disclose sensitive information...

CVE-2023-43577: Buffer Copy without Checking Size of Input

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

PT-2023-28867 · Lenovo · Smuv11Dxe

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the SmuV11Dxe driver that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the moment,...

PT-2023-28869 · Lenovo · Lenovo Desktop

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the Update WMI module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the moment,...

PT-2023-28857

Name of the Vulnerable Software and Affected Versions Lenovo Desktop products affected versions not specified Description A buffer overflow was reported in the OemSmi module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations At the moment, there is...

PT-2023-28859 · Lenovo · Biosextensionloader

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the BiosExtensionLoader module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the...

PT-2023-28861 · Lenovo · Lemalldriversconnectedeventhook

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the LEMALLDriversConnectedEventHook module that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43575: Buffer Copy without Checking Size of Input

A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43580: Buffer Copy without Checking Size of Input

A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

PT-2023-28855 · Lenovo · Lenovo Desktop

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the LemSecureBootForceKey module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At th...

PT-2023-28860

Name of the Vulnerable Software and Affected Versions Lenovo Desktop products affected versions not specified Description A buffer over-read was reported in the BiosExtensionLoader module that may allow a local attacker with elevated privileges to disclose sensitive information. Recommendations A...

CVE-2023-43571: Buffer Copy without Checking Size of Input

A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43572: Buffer Over-read

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...

CVE-2023-43574: Buffer Over-read

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...

CVE-2023-43578: Buffer Copy without Checking Size of Input

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code...

CVE-2023-43568: Buffer Over-read

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...