CoreCVE
Back

HIGH

A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code

Published Jul 17, 2025

Description

A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.

Affected products

Remediation

Vendor solution

Update Lenovo PC Manager to version 5.1.110.5082 or later.

Update Lenovo Browser to version 9.0.6.5061 or later.

Update Lenovo App Store to version 9.0.2230.0617 or later.

Weaknesses (1)

CWE-122

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner lenovo
Published Jul 17, 2025
Updated Jul 17, 2025
Reserved May 13, 2025
Link CVE-2025-4657
CISA Vulnrichment
Updated Jul 17, 2025
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2025-4657
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-4657