Buffer Overflow Vulnerability in Lenovo PC Manager, Browser, and App Store
CVE-2024-10254

4.7MEDIUM

Key Information:

Vendor

Lenovo
Status
Pc Manager
Browser
App Store
Vendor
CVE Published:
14 January 2025

What is CVE-2024-10254?

A buffer overflow vulnerability has been identified in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store. This flaw could potentially allow a local attacker to exploit the vulnerability, leading to system instability and crashes. Users are urged to stay informed about updates and patches to mitigate potential security risks associated with these affected products.

Affected Version(s)

App Store 0 < 9.0.20

Browser 0 < 9.0.5.12181

PC Manager 0 < 5.1.90.12092

References

https://iknow.lenovo.com.cn/detail/425367

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Credit

Lenovo thanks Gareth Evans of Kryc for reporting this issue.
.