CVE-2023-5075

CVE-2023-5075 affects Lenovo IdeaPad Duet 3-10IGL5 via a buffer overflow in the FmpSipoCapsuleDriver. The root cause is a vulnerability in the driver that could allow a local attacker with elevated privileges to execute arbitrary code. The available documents confirm the affected component and im...

CVE-2023-5075

A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privileges to execute arbitrary code...

PT-2023-31631 · Lenovo · Ideapad Duet 3-10Igl5

Name of the Vulnerable Software and Affected Versions: IdeaPad Duet 3-10IGL5 affected versions not specified Description: A buffer overflow was reported in the FmpSipoCapsuleDriver driver that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the...

Lenovo IdeaPad Y700-14ISK 安全漏洞

Lenovo IdeaPad is a line of laptops from the Chinese company Lenovo Lenovo. A security vulnerability exists in the Lenovo IdeaPad Y700-14ISK. An attacker could exploit the vulnerability to modify the secure boot settings by modifying the NVRAM variable...

CVE-2022-3432

CVE-2022-3432 concerns a Lenovo Ideapad Y700-14ISK UEFI/driver issue where a manufacturing-time driver not deactivated could let an attacker with elevated privileges modify an NVRAM variable to disable or undermine Secure Boot. The vulnerability is described across multiple sources (NVD, Red Hat,...

CVE-2022-3432

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

CVE-2022-3432

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable...

PT-2022-22129 · Lenovo · Lenovo Ideapad Y700-14Isk

Name of the Vulnerable Software and Affected Versions: Lenovo Ideapad Y700-14ISK affected versions not specified Description: A potential issue in a driver used during the manufacturing process may allow an attacker with elevated privileges to modify secure boot settings by altering an NVRAM...

UVI-2021-1000503 platform/x86: ideapad-laptop: fix a NULL pointer dereference

platform/x86: ideapad-laptop: fix a NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.7 by commit...

GSD-2021-1000503 platform/x86: ideapad-laptop: fix a NULL pointer dereference

platform/x86: ideapad-laptop: fix a NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.7 by commit...

PT-2024-11156 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue has been resolved in the Linux kernel. The third parameter of dytc cql command should not be NULL, as it will be dereferenced immediately. This issue i...

CVE-2018-9069

The CVE-2018-9069 entry concerns a race condition in the BIOS flash device locking mechanism on Lenovo IdeaPad consumer notebooks. The issue can allow an attacker with administrator access to alter BIOS contents due to insufficient protection of the locking mechanism. Affects Lenovo consumer note...

CVE-2018-9069 BIOS Write Protection Race Condition

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...

Race condition

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...

CVE-2018-9069

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...

BIOS Write Protection Race Condition

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...