CVE-2023-4028

A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

• lenovo 13w yoga firmware (< jacn38ww) • lenovo 13w yoga gen 2 firmware (< kbcn20ww) • lenovo ideapad 1-11ada05 firmware (< fqcn29ww) • lenovo ideapad 1-11igl05 firmware (< dwcn28ww) • lenovo ideapad 1-14ada05 firmware (< fqcn29ww) • lenovo ideapad 1-14igl05 firmware (< dwcn28ww) • lenovo flex 5-14alc05 firmware (< gjcn32ww) • lenovo flex 5-14are05 firmware (< eecn43ww) • lenovo flex 5-14iil05 firmware (< eccn45ww) • lenovo flex 5-14itl05 firmware (< fxcn44ww) • lenovo flex 5-15alc05 firmware (< gjcn32ww) • lenovo flex 5-15iil05 firmware (< eccn45ww) • lenovo flex 5-15itl05 firmware (< fxcn44ww) • lenovo ideapad flex 5 14abr8 firmware (< l7cn17ww) • lenovo ideapad flex 5 14alc7 firmware (< jccn35ww) • lenovo ideapad flex 5 14iau7 firmware (< j7cn44ww) • lenovo ideapad flex 5 14iru8 firmware (< l6cn20ww) • lenovo ideapad flex 5 16abr8 firmware (< l7cn17ww) • lenovo ideapad flex 5 16alc7 firmware (< jccn35ww) • lenovo ideapad flex 5 16iau7 firmware (< j7cn44ww) • lenovo ideapad flex 5 16iru8 firmware (< l6cn20ww) • lenovo flex 7 14iru8 firmware (< l6cn20ww) • lenovo thinkbook 13s g2 are firmware (< fvcn28ww) • lenovo thinkbook 13s g2 itl firmware (< f9cn57ww) • lenovo thinkbook 13s g3 acn firmware (< gmcn35ww) • lenovo thinkbook 13s g4 iap firmware (< hwcn49ww) • lenovo thinkbook 13x g2 iap firmware (< hxcn54ww) • lenovo thinkbook 14s g2 itl firmware (< f9cn57ww) • lenovo yoga 9-15imh5 firmware (< epcn32ww)