CVE-2025-4657 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.

Reserved 2025-05-13 | Published 2025-07-17 | Updated 2025-07-17 | Assigner lenovo

HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

MEDIUM: 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-122: Heap-based Buffer Overflow

Product status

Default status

unaffected

Any version before 5.1.110.5082

affected

Default status

unaffected

Any version before 9.0.6.5061

affected

Default status

unaffected

Any version before 9.0.2230.0617

affected

Credits

Lenovo thanks Gareth Evans of Kryc for reporting this issue. finder

References

iknow.lenovo.com.cn/detail/430155

cve.org (CVE-2025-4657)

nvd.nist.gov (CVE-2025-4657)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-4657

Support options

Helpdesk Chat, Email, Knowledgebase