← Database

CVE-2022-3742

MEDIUM CVSS: 6.7 Published: 2023-08-23 Modified: 2026-06-17

Description

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.

Affected Platforms

Lenovo Legion 5 15Iah7Lenovo Yoga 7-15Itl5Lenovo V14-IglLenovo Thinkbook 15P G2 IthLenovo Ideapad 1 14Iau7 FirmwareLenovo Yoga Slim 7 Prox 14Iah7 FirmwareLenovo Ideapad 5-15Iil05 FirmwareLenovo Legion 5-15Imh05H FirmwareLenovo Yoga Slim 7 Pro-14Itl5Lenovo Legion 5-15Imh05H

Weakness Type

CWE-120

References