← Database

CVE-2022-1892

MEDIUM CVSS: 6.7 Published: 2023-01-26 Modified: 2026-06-17

Description

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Affected Platforms

Lenovo Ideapad Flex 5 16Alc7Lenovo Flex 5-15Alc05 FirmwareLenovo Yoga S940-14Iil FirmwareLenovo 13W Yoga FirmwareLenovo Flex 5-14Are05 FirmwareLenovo Legion S7-15Arh5Lenovo Yoga Slim 7 Pro-14Arh5 FirmwareLenovo Ideapad 1-11Igl05Lenovo S145-15ApiLenovo V15 G2-Alc Firmware

Weakness Type

CWE-122, CWE-120

References