MEDIUM
A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code
Published Sep 13, 2024
6.7
MEDIUMCVSS 3.1
EPSS 0.17%
Description
A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.
Affected products
-
- Version 0StatusaffectedConstraints<GACN48WW
- Version
-
- Version 0StatusaffectedConstraints<L2CN34WW/L3CN34WW
- Version
-
- Version 0StatusaffectedConstraints<JACN41WW
- Version
-
- Version 0StatusaffectedConstraints<KBCN29WW
- Version
-
- Version 0StatusaffectedConstraints<H0CN29WW
- Version
-
- Version 0StatusaffectedConstraints<GACN48WW
- Version
-
- Version 0StatusaffectedConstraints<L2CN34WW/L3CN34WW
- Version
-
- Version 0StatusaffectedConstraints<L2CN34WW/L3CN34WW
- Version
-
- Version 0StatusaffectedConstraints<FXCN47WW
- Version
-
- Version 0StatusaffectedConstraints<FXCN47WW
- Version
-
- Version 0StatusaffectedConstraints<JTCN54WW
- Version
-
- Version 0StatusaffectedConstraints<JTCN54WW
- Version
-
- Version 0StatusaffectedConstraints<DWCN31WW
- Version
-
- Version 0StatusaffectedConstraints<DWCN31WW
- Version
-
- Version 0StatusaffectedConstraints<JTCN54WW
- Version
-
- Version 0StatusaffectedConstraints<JTCN54WW
- Version
-
- Version 0StatusaffectedConstraints<JTCN54WW
- Version
-
- Version 0StatusaffectedConstraints<=GLCN63WW
- Version
-
- Version 0StatusaffectedConstraints<=GLCN63WW
- Version
-
- Version 0StatusaffectedConstraints<=GLCN63WW
- Version
-
- Version 0StatusaffectedConstraints<L7CN21WW
- Version
-
- Version 0StatusaffectedConstraints<JCCN40WW
- Version
-
- Version 0StatusaffectedConstraints<J7CN48WW
- Version
-
- Version 0StatusaffectedConstraints<L6CN24WW
- Version
-
- Version 0StatusaffectedConstraints<L7CN21WW
- Version
-
- Version 0StatusaffectedConstraints<JCCN40WW
- Version
-
- Version 0StatusaffectedConstraints<J7CN48WW
- Version
-
- Version 0StatusaffectedConstraints<L6CN24WW
- Version
-
- Version 0StatusaffectedConstraints<=KYCN32WW
- Version
-
- Version 0StatusaffectedConstraints<L1CN41WW
- Version
-
- Version 0StatusaffectedConstraints<=KYCN32WW
- Version
-
- Version 0StatusaffectedConstraints<L1CN41WW
- Version
-
- Version 0StatusaffectedConstraints<=KYCN32WW
- Version
-
- Version 0StatusaffectedConstraints<=L9CN26WW
- Version
-
- Version 0StatusaffectedConstraints<MMCN36WW
- Version
-
- Version 0StatusaffectedConstraints<J7CN48WW
- Version
-
- Version 0StatusaffectedConstraints<L6CN24WW
- Version
-
- Version 0StatusaffectedConstraints<JTCN54WW
- Version
-
- Version 0StatusaffectedConstraints<MSCN16WW
- Version
-
- Version 0StatusaffectedConstraints<L1CN41WW
- Version
-
- Version 0StatusaffectedConstraints<JTCN54WW
- Version
-
- Version 0StatusaffectedConstraints<MSCN16WW
- Version
-
- Version 0StatusaffectedConstraints<L1CN41WW
- Version
-
- Version 0StatusaffectedConstraints<HZCN55WW
- Version
-
- Version 0StatusaffectedConstraints<HWCN52WW
- Version
-
- Version 0StatusaffectedConstraints<HXCN57WW
- Version
-
- Version 0StatusaffectedConstraints<MNCN27WW
- Version
-
- Version 0StatusaffectedConstraints<MMCN36WW
- Version
-
- Version 0StatusaffectedConstraints<MNCN27WW
- Version
-
- Version 0StatusaffectedConstraints<MMCN36WW
- Version
-
- Version 0StatusaffectedConstraints<=GLCN63WW
- Version
-
- Version 0StatusaffectedConstraints<=GLCN63WW
- Version
-
- Version 0StatusaffectedConstraints<GZCN36WW
- Version
-
- Version 0StatusaffectedConstraints<GZCN36WW
- Version
-
- Version 0StatusaffectedConstraints<H2CN35WW
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Lenovo | 100w Gen 3 Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | 100w Gen 4 Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | 14W Gen 2 Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | 300w Gen 3 Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | 300w Yoga Gen 4 Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | 500w Yoga Gen 4 Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | Flex 5-14ITL05 Laptop (ideapad) BIOS | unaffected |
| ||||||
| Lenovo | Flex 5-15ITL05 Laptop (ideapad) BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 1 14ALC7 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 1 15ALC7 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 1-11IGL05 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 1-14IGL05 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 3 14ABA7 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 3 15ABA7 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 3 17ABA7 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 3-14ALC6 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 3-15ALC6 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad 3-17ALC6 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Flex 5 14ABR8 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Flex 5 14ALC7 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Flex 5 14IAU7 Laptop BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Flex 5 14IRU8 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Flex 5 16ABR8 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Flex 5 16ALC7 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Flex 5 16IAU7 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Flex 5 16IRU8 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Slim 3 14ABR8 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Slim 3 14AMN8 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Slim 3 15ABR8 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Slim 3 15AMN8 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Slim 3 16ABR8 BIOS | unaffected |
| ||||||
| Lenovo | IdeaPad Slim 5 Light 14ABR8 BIOS | unaffected |
| ||||||
| Lenovo | K14 G2 Iru Bios | unaffected |
| ||||||
| Lenovo | Lenovo Flex 7 14IAU7 BIOS | unaffected |
| ||||||
| Lenovo | Lenovo Flex 7 14IRU8 BIOS | unaffected |
| ||||||
| Lenovo | Lenovo V14 G3 ABA Laptop BIOS | unaffected |
| ||||||
| Lenovo | Lenovo V14 G4 ABP BIOS | unaffected |
| ||||||
| Lenovo | Lenovo V14 G4 AMN BIOS | unaffected |
| ||||||
| Lenovo | Lenovo V15 G3 ABA Laptop BIOS | unaffected |
| ||||||
| Lenovo | Lenovo V15 G4 ABP BIOS | unaffected |
| ||||||
| Lenovo | Lenovo V15 G4 AMN BIOS | unaffected |
| ||||||
| Lenovo | ThinkBook 13s G4 ARB BIOS | unaffected |
| ||||||
| Lenovo | ThinkBook 13s G4 IAP BIOS | unaffected |
| ||||||
| Lenovo | ThinkBook 13x G2 IAP Laptop BIOS | unaffected |
| ||||||
| Lenovo | ThinkBook 14 G6 ABP BIOS | unaffected |
| ||||||
| Lenovo | ThinkBook 14 G6 IRL BIOS | unaffected |
| ||||||
| Lenovo | ThinkBook 16 G6 ABP BIOS | unaffected |
| ||||||
| Lenovo | ThinkBook 16 G6 IRL BIOS | unaffected |
| ||||||
| Lenovo | V14 G2-ALC Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | V15 G2-ALC Laptop (Lenovo) BIOS | unaffected |
| ||||||
| Lenovo | Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS | unaffected |
| ||||||
| Lenovo | Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS | unaffected |
| ||||||
| Lenovo | ideapad 5-15ALC05 Laptop BIOS | unaffected |
|
No data.
-
- Version 0StatusaffectedConstraints<gacn48ww
- Version
-
- Version 0StatusaffectedConstraints<jacn41ww
- Version
-
- Version 0StatusaffectedConstraints<kbcn29ww
- Version
-
- Version 0StatusaffectedConstraints<h0cn29ww
- Version
-
- Version 0StatusaffectedConstraints<l2cn34ww
- Version 0StatusaffectedConstraints<l3cn34ww
- Version
-
- Version 0StatusaffectedConstraints<fxcn47ww
- Version
-
- Version 0StatusaffectedConstraints<dwcn31ww
- Version
-
- Version 0StatusaffectedConstraints<jtcn54ww
- Version
-
- Version 0StatusaffectedConstraints<glcn63ww
- Version
-
- Version 0StatusaffectedConstraints<h2cn35ww
- Version
-
- Version 0StatusaffectedConstraints<jccn40ww
- Version
-
- Version 0StatusaffectedConstraints<l7cn21ww
- Version
-
- Version 0StatusaffectedConstraints<j7cn48ww
- Version
-
- Version 0StatusaffectedConstraints<l6cn24ww
- Version
-
- Version 0StatusaffectedConstraints<l1cn41ww
- Version
-
- Version 0StatusaffectedConstraints<kycn32ww
- Version
-
- Version 0StatusaffectedConstraints<l9cn26ww
- Version
-
- Version 0StatusaffectedConstraints<mmcn36ww
- Version
-
- Version 0StatusaffectedConstraints<hzcx55ww
- Version
-
- Version 0StatusaffectedConstraints<hwcn52ww
- Version
-
- Version 0StatusaffectedConstraints<hxcn57ww
- Version
-
- Version 0StatusaffectedConstraints<mncn27ww
- Version
-
- Version 0StatusaffectedConstraints<mscn16ww
- Version
-
- Version 0StatusaffectedConstraints<gzcn36ww
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Lenovo | 100w Gen 3 Firmware | unaffected |
| |||||||||
| Lenovo | 13w Yoga Firmware | unaffected |
| |||||||||
| Lenovo | 13w Yoga Gen 2 Firmware | unaffected |
| |||||||||
| Lenovo | 14w Gen 2 Firmware | unaffected |
| |||||||||
| Lenovo | 500w Yoga Gen 4 Firmware | unaffected |
| |||||||||
| Lenovo | Flex 5-14itl05 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad 1-11igl05 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad 1 15alc7 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad 3-17alc6 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad 5-15alc05 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad Flex 5 14alc7 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad Flex 5 16abr8 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad Flex 5 16iau7 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad Flex 5 16iru8 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad Slim 3 15amn8 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad Slim 3 16abr8 Firmware | unaffected |
| |||||||||
| Lenovo | Ideapad Slim 5 Light 14abr8 Firmware | unaffected |
| |||||||||
| Lenovo | K14 G2 Iru Firmware | unaffected |
| |||||||||
| Lenovo | Thinkbook 13s G4 Arb Firmware | unaffected |
| |||||||||
| Lenovo | Thinkbook 13s G4 Iap Firmware | unaffected |
| |||||||||
| Lenovo | Thinkbook 13x G2 Iap Firmware | unaffected |
| |||||||||
| Lenovo | Thinkbook 16 G6 Abp Firmware | unaffected |
| |||||||||
| Lenovo | V15 G4 Abp Firmware | unaffected |
| |||||||||
| Lenovo | Yoga Slim 7 Pro-14ach5 O Firmware | unaffected |
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Update system firmware to the version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-165524
Weaknesses (1)
References (2)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner lenovo
Published Sep 13, 2024
Updated Sep 17, 2024
Reserved Mar 29, 2024
Link CVE-2024-3100
CISA Vulnrichment
Updated Sep 13, 2024
ENISA EUVD
EUVD-2024-31703 Assigner lenovo
Published Sep 13, 2024
Updated Sep 17, 2024
Exploited since n/a
Link EUVD-2024-31703