CVE-2024-3100 
A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Lenovo
product: 100w Gen 3 Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: 100w Gen 4 Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: 14W Gen 2 Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: 300w Gen 3 Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: 300w Yoga Gen 4 Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: 500w Yoga Gen 4 Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: Flex 5-14ITL05 Laptop (ideapad) BIOS
default_status: unaffected
vendor: Lenovo
product: Flex 5-15ITL05 Laptop (ideapad) BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 1 14ALC7 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 1 15ALC7 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 1-11IGL05 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 1-14IGL05 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 3 14ABA7 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 3 15ABA7 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 3 17ABA7 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 3-14ALC6 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 3-15ALC6 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad 3-17ALC6 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: ideapad 5-15ALC05 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Flex 5 14ABR8 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Flex 5 14ALC7 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Flex 5 14IAU7 Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Flex 5 14IRU8 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Flex 5 16ABR8 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Flex 5 16ALC7 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Flex 5 16IAU7 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Flex 5 16IRU8 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Slim 3 14ABR8 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Slim 3 14AMN8 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Slim 3 15ABR8 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Slim 3 15AMN8 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Slim 3 16ABR8 BIOS
default_status: unaffected
vendor: Lenovo
product: IdeaPad Slim 5 Light 14ABR8  BIOS
default_status: unaffected
vendor: Lenovo
product: K14 G2 IRU BIOS
default_status: unaffected
vendor: Lenovo
product: Lenovo Flex 7 14IAU7 BIOS
default_status: unaffected
vendor: Lenovo
product: Lenovo Flex 7 14IRU8 BIOS
default_status: unaffected
vendor: Lenovo
product: Lenovo V14 G3 ABA Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: Lenovo V14 G4 ABP BIOS
default_status: unaffected
vendor: Lenovo
product: Lenovo V14 G4 AMN BIOS
default_status: unaffected
vendor: Lenovo
product: Lenovo V15 G3 ABA Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: Lenovo V15 G4 ABP BIOS
default_status: unaffected
vendor: Lenovo
product: Lenovo V15 G4 AMN BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkBook 13s G4 ARB BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkBook 13s G4 IAP BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkBook 13x G2 IAP Laptop BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkBook 14 G6 ABP BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkBook 14 G6 IRL BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkBook 16 G6 ABP BIOS
default_status: unaffected
vendor: Lenovo
product: ThinkBook 16 G6 IRL BIOS
default_status: unaffected
vendor: Lenovo
product: V14 G2-ALC Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: V15 G2-ALC Laptop (Lenovo) BIOS
default_status: unaffected
vendor: Lenovo
product: Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS
default_status: unaffected
vendor: Lenovo
product: Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Lenovo thanks Eason for reporting this issue.
Published: 2024-09-13T17:26:33.357Z