Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Lenovo BIOS ausnutzen, um Daten zu manipulieren, einen Denial of Service zu verursachen, Code Auszuführen und seine Rechte zu erweitern.
Product
Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.
Vulnerabilities 6
-
High 7.8
Out-of-bounds Write in Display
Memory corruption while processing a malformed license file during reboot.
-
Medium 6.0
Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP init…
-
Medium 5.8
Buffer Overflow in NTFS when parsing the VOLUME_NAME
APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.
-
Medium 5.8
Buffer Overflow in NTFS when parsing the ATTRIBUTE_LIST
APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and loss of availability.
-
Medium 5.8
exFat Memory Corruption Issue
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitation of this vulnerability may lead to memory corruption and impact Integrity and…
-
Medium 4.6
FixupArray Pointer Validation in NTFS
APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution.
Revision history
-
#1
Initiale Fassung
References
-
Lenovo Security Advisory vom 2025-10-14
https://support.lenovo.com/us/en/product_security/LEN-205828