Home

Description

A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.

PUBLISHED Reserved 2025-05-13 | Published 2025-07-17 | Updated 2025-07-17 | Assigner lenovo




HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

MEDIUM: 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-122: Heap-based Buffer Overflow

Product status

Default status
unaffected

Any version before 5.1.110.5082
affected

Default status
unaffected

Any version before 9.0.6.5061
affected

Default status
unaffected

Any version before 9.0.2230.0617
affected

Credits

Lenovo thanks Gareth Evans of Kryc for reporting this issue. finder

References

iknow.lenovo.com.cn/detail/430155

cve.org (CVE-2025-4657)

nvd.nist.gov (CVE-2025-4657)

Download JSON