medium6.7
CVE-2023-45076
A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
Impact
A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideacentre C5-14imb05 Firmware | before o4hkt3ca |
| Lenovo | Ideacentre 3-07ada05 Firmware | before o4fkt39a |
| Lenovo | Ideacentre 3-07imb05 Firmware | before m2vkt21a |
| Lenovo | Ideacentre G5-14imb05 Firmware | before o4hkt3ca |
| Lenovo | Ideacentre 5-14iob6 Firmware | before m3gkt3da |
| Lenovo | Ideacentre Creator 5-14iob6 Firmware | before m3gkt3da |
| Lenovo | Ideacentre G5-14amr05 Firmware | before o4zkt2ba |
| Lenovo | Ideacentre Gaming 5-14iob6 Firmware | before m3gkt3da |
| Lenovo | Ideacentre Mini 5 01iaq7 Firmware | before o53kt10a |
| Lenovo | Ideacentre Mini 5-01imh05 Firmware | before o4ekt1ba |
| Lenovo | Legion T7-34imz5 Firmware | before o5fkt17a |
| Lenovo | Thinkcentre M625q Firmware | before m1wkt52a |