BIOS vulnerabilities

3 known vulnerabilities in BIOS from Lenovo. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  BIOS: Incorrect Default Permissions

  CVE-2022-3431Oct 9, 2023Lenovo

  A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

• 7.8 High severity

  BIOS: Buffer Copy without Checking Size of Input

  CVE-2022-1892Jan 26, 2023Lenovo

  A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

• 7.8 High severity

  BIOS: Buffer Copy without Checking Size of Input

  CVE-2022-1891Jan 26, 2023Lenovo

  A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.