PT-2022-3640 · Lenovo · Systemloaddefaultdxe Driver

CVE-2022-1891

·

Published

2022-07-12

·

Updated

2023-02-03

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Lenovo Notebook products (affected versions not specified)
Description A buffer overflow in the SystemLoadDefaultDxe driver may allow an attacker with local privileges to execute arbitrary code. The issue is related to the SystemLoadDefaultDxe driver in some Lenovo Notebook products.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Heap Based Buffer Overflow

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2022-04425
CVE-2022-1891

Affected Products

Systemloaddefaultdxe Driver