medium6.7
CVE-2022-1891
A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Impact
A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkbook 14-Iml Firmware | before cjcn38ww |
| Lenovo | Thinkbook 14-Iil Firmware | before djcn28ww |
| Lenovo | Thinkbook 15-Iil Firmware | before djcn28ww |
| Lenovo | Thinkbook 15-Iml Firmware | before cjcn38ww |
| Lenovo | Yoga C640-13iml Lte Firmware | before chcn28ww |
| Lenovo | Yoga C640-13iml Firmware | before chcn28ww |