← Database

CVE-2022-1890

MEDIUM CVSS: 6.7 Published: 2023-01-26 Modified: 2026-06-17

Description

A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Affected Platforms

Lenovo Yoga C640-13Iml LteLenovo Thinkbook 15-ImlLenovo Thinkbook 15-Iml FirmwareLenovo Yoga C640-13Iml FirmwareLenovo Yoga C640-13Iml Lte FirmwareLenovo Thinkbook 14-IilLenovo Thinkbook 14-ImlLenovo Yoga C640-13ImlLenovo Thinkbook 14-Iil FirmwareLenovo Thinkbook 14-Iml Firmware

Weakness Type

CWE-122, CWE-787

References