Buffer Validation Flaw in Lenovo Consumer Notebook BIOS
CVE-2022-3742

6.7MEDIUM

Key Information:

Vendor

Lenovo
Status
Notebook
Vendor
CVE Published:
23 August 2023

What is CVE-2022-3742?

A potential vulnerability exists in the LCFC BIOS of certain Lenovo consumer notebook models that could enable a local attacker with elevated privileges to execute arbitrary code. This issue arises from inadequate validation of buffer sizes, posing significant risks to system integrity and user security. For further information, please refer to Lenovo's official security advisory.

Affected Version(s)

Notebook various

References

https://support.lenovo.com/us/en/product_security/LEN-103710

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.