CVE-2023-4029

A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

• lenovo k14 type 21cu firmware (< 1.12) • lenovo k14 type 21cv firmware (< 1.12) • lenovo thinkpad s2 yoga gen 8 firmware (< 1.10) • lenovo thinkpad e14 gen 3 firmware (< 1.15) • lenovo thinkpad e15 gen 3 firmware (< 1.15) • lenovo thinkpad l13 gen 2 firmware (< 1.30) • lenovo thinkpad l13 gen 3 firmware (< 1.19) • lenovo thinkpad l13 gen 4 firmware (< 1.10) • lenovo thinkpad l13 yoga gen 4 firmware (< 1.10) • lenovo thinkpad l13 yoga gen 2 firmware (< 1.30) • lenovo thinkpad l13 yoga gen 3 firmware (< 1.19) • lenovo thinkpad l14 gen 2 firmware (< 1.28) • lenovo thinkpad l14 gen 3 firmware (< 1.23) • lenovo thinkpad l14 gen 4 firmware (< 1.06) • lenovo thinkpad l15 gen 2 firmware (< 1.28) • lenovo thinkpad l15 gen 3 firmware (< 1.23) • lenovo thinkpad l15 gen 4 firmware (< 1.06) • lenovo thinkpad p14s gen 2 firmware (< 1.34) • lenovo thinkpad t14 gen 2 firmware (< 1.34) • lenovo thinkpad t14s gen 2 firmware (< 1.37) • lenovo thinkpad s2 gen 6 firmware (< 1.30) • lenovo thinkpad s2 gen 7 firmware (< 1.19) • lenovo thinkpad s2 gen 8 firmware (< 1.10) • lenovo thinkpad s2 yoga gen 6 firmware (< 1.30) • lenovo thinkpad s2 yoga gen 7 firmware (< 1.19) • lenovo thinkpad x13 gen 2 firmware (< 1.37)