medium6.7
CVE-2023-4029
A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and eleva…
Impact
A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | K14 Type 21cu Firmware | before 1.12 |
| Lenovo | K14 Type 21cv Firmware | before 1.12 |
| Lenovo | Thinkpad S2 Yoga Gen 8 Firmware | before 1.10 |
| Lenovo | Thinkpad E14 Gen 3 Firmware | before 1.15 |
| Lenovo | Thinkpad E15 Gen 3 Firmware | before 1.15 |
| Lenovo | Thinkpad L13 Gen 2 Firmware | before 1.30 |
| Lenovo | Thinkpad L13 Gen 3 Firmware | before 1.19 |
| Lenovo | Thinkpad L13 Gen 4 Firmware | before 1.10 |
| Lenovo | Thinkpad L13 Yoga Gen 4 Firmware | before 1.10 |
| Lenovo | Thinkpad L13 Yoga Gen 2 Firmware | before 1.30 |
| Lenovo | Thinkpad L13 Yoga Gen 3 Firmware | before 1.19 |
| Lenovo | Thinkpad L14 Gen 2 Firmware | before 1.28 |