Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-1891

A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Published

2023-01-26T21:15:25.193

Last Modified

2024-11-21T06:41:41.517

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-122
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo thinkbook_14-iml_firmware < cjcn38ww Yes
Hardware lenovo thinkbook_14-iml - No
Operating System lenovo thinkbook_14-iil_firmware < djcn28ww Yes
Hardware lenovo thinkbook_14-iil - No
Operating System lenovo thinkbook_15-iil_firmware < djcn28ww Yes
Hardware lenovo thinkbook_15-iil - No
Operating System lenovo thinkbook_15-iml_firmware < cjcn38ww Yes
Hardware lenovo thinkbook_15-iml - No
Operating System lenovo yoga_c640-13iml_lte_firmware < chcn28ww Yes
Hardware lenovo yoga_c640-13iml_lte - No
Operating System lenovo yoga_c640-13iml_firmware < chcn28ww Yes
Hardware lenovo yoga_c640-13iml - No
References