CVE-2024-23594

Summary

A buffer overflow vulnerability was reported

in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014

that could allow a privileged attacker with local access to execute arbitrary code.

Affected Software

Weaknesses

• CWE-121: CWE-121: Stack-based Buffer Overflow

ADP Enrichment

CVE Program Container

Additional References

• https://support.lenovo.com/us/en/product_security/LEN-132277

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://support.lenovo.com/us/en/product_security/LEN-132277

• ←Previous
• Next→