CVEvulnerability

CVE-2023-34419

6.7 MEDIUM Published 2023-08-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120

Description

A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected configurations

• lenovo legion 5 pro 16iah7h firmware (< j2cn51ww) • lenovo legion 5 pro 16iah7 firmware (< j2cn51ww) • lenovo legion 5 pro 16arh7 firmware • lenovo legion 5 pro 16arh7h firmware • lenovo legion 5 15arh7 firmware • lenovo legion 5 15arh7h firmware • lenovo legion 5 15iah7h firmware (< j2cn51ww) • lenovo legion 5 15iah7 firmware (< j2cn51ww) • lenovo legion 5 pro-16ach6 firmware • lenovo legion 5 pro-16ach6h firmware • lenovo legion 5 pro-16ith6 firmware • lenovo legion 5 pro-16ith6h firmware • lenovo legion 5-15ach6 firmware • lenovo legion 5-15ach6a firmware • lenovo legion 5-15ach6h firmware • lenovo legion 5-15ith6 firmware • lenovo legion 5-15ith6h firmware • lenovo legion 5-17ach6 firmware • lenovo legion 5-17ach6h firmware • lenovo legion 5-17ith6 firmware • lenovo legion 5-17ith6h firmware • lenovo legion 7-16arha7 firmware • lenovo legion 7-16achg6 firmware • lenovo legion 7-16ithg6 firmware • lenovo legion pro 5 16irx8 firmware (< kwcn37ww) • lenovo legion pro 7 16irx8 firmware (< kwcn37ww) • lenovo legion pro 7 16irx8h firmware (< kwcn37ww) • lenovo legion s7 16arha7 firmware • lenovo thinkbook 16p g3 arh firmware • lenovo thinkbook 15p g2 ith firmware

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References