← Database

CVE-2022-48181

MEDIUM CVSS: 6.7 Published: 2023-06-05 Modified: 2026-06-17

Description

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Affected Platforms

Lenovo Legion T5-28Icb05 FirmwareLenovo V35S-07AdaLenovo Thinkcentre M75NLenovo Ideacentre G5-14Imb05 FirmwareLenovo Thinkstation P330 Tiny FirmwareLenovo Thinkcentre M90A Gen 3 FirmwareLenovo Thinkcentre Neo 30A 27 Gen 3 FirmwareLenovo Thinkcentre M920XLenovo Ideacentre Gaming 5-14Acn6Lenovo Lenovo Legion T5 26Iab7 Firmware

Weakness Type

CWE-787, CWE-787

References