CVE-2022-48188

A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.

• lenovo ideacentre aio 3 21itl7 firmware (< o5akt33) • lenovo ideacentre aio 3-22itl6 firmware (< o5akt33) • lenovo ideacentre aio 3-24itl6 firmware (< o5akt33) • lenovo ideacentre aio 3-27itl6 firmware (< o5akt33) • lenovo thinkcentre m720e firmware (< m1zkt40a) • lenovo thinkcentre m720q firmware (< m1ukt70a) • lenovo thinkcentre m720s firmware (< m1ukt70a) • lenovo thinkcentre m720t firmware (< m1ukt70a) • lenovo thinkcentre m725s firmware (< m25kt63a) • lenovo thinkcentre m75s gen 2 firmware (< m46kt30a) • lenovo thinkcentre m75s gen 2 firmware (< m3bkt30a) • lenovo thinkcentre m75t gen 2 firmware (< m46kt30a) • lenovo thinkcentre m75t gen 2 firmware (< m3akt4ca) • lenovo thinkcentre m920q firmware (< m1ukt70a) • lenovo thinkcentre m920s firmware (< m1ukt70a) • lenovo thinkcentre m920t firmware (< m1ukt70a) • lenovo thinkcentre m920x firmware (< m1ukt70a) • lenovo thinkcentre m920z firmware (< m1mkt55a) • lenovo ideacentre 510s-07icb firmware (< m22kt48a) • lenovo ideacentre 510s-07icb firmware (< m22kt49a) • lenovo ideacentre 510s-07ick firmware (< m30kt28a) • lenovo ideacentre 510s-07ick firmware (< m1zkt40a) • lenovo ideacentre 720-18apr firmware (< m25kt63a) • lenovo v30a-22itl firmware (< o5akt33) • lenovo v30a-24itl firmware (< o5akt33) • lenovo v530s-07icb firmware (< m22kt49a) • lenovo v530s-07icr firmware (< m1zkt40a) • lenovo thinkstation p330 tiny firmware (< m1ukt70a) • lenovo thinkstation p360 ultra firmware (< s0fkt27a) • lenovo thinkstation p520 firmware (< s03kt58a) • lenovo thinkstation p520c firmware (< s03kt58a)