Riskcovery

CVE-2024-3100

State
Published
Severity
6.7 Medium
Published
Sep 13, 2024
Updated
Sep 17, 2024
Reserved
Mar 29, 2024

Read the record on cve.org

Description

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

Scores

CVSSScoreVectorSource
3.16.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hlenovo

Weaknesses

  • CWE-121 Stack-based Buffer Overflow

Affected Products

ProductVersions
100w Gen 3 Laptop (Lenovo) BIOSLenovo
  • before GACN48WWAffected
100w Gen 4 Laptop (Lenovo) BIOSLenovo
  • before L2CN34WW/L3CN34WWAffected
13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOSLenovo
  • before JACN41WWAffected
13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOSLenovo
  • before KBCN29WWAffected
14W Gen 2 Laptop (Lenovo) BIOSLenovo
  • before H0CN29WWAffected
300w Gen 3 Laptop (Lenovo) BIOSLenovo
  • before GACN48WWAffected
300w Yoga Gen 4 Laptop (Lenovo) BIOSLenovo
  • before L2CN34WW/L3CN34WWAffected
500w Yoga Gen 4 Laptop (Lenovo) BIOSLenovo
  • before L2CN34WW/L3CN34WWAffected
Flex 5-14ITL05 Laptop (ideapad) BIOSLenovo
  • before FXCN47WWAffected
Flex 5-15ITL05 Laptop (ideapad) BIOSLenovo
  • before FXCN47WWAffected
IdeaPad 1 14ALC7 Laptop BIOSLenovo
  • before JTCN54WWAffected
IdeaPad 1 15ALC7 Laptop BIOSLenovo
  • before JTCN54WWAffected
IdeaPad 1-11IGL05 Laptop BIOSLenovo
  • before DWCN31WWAffected
IdeaPad 1-14IGL05 Laptop BIOSLenovo
  • before DWCN31WWAffected
IdeaPad 3 14ABA7 Laptop BIOSLenovo
  • before JTCN54WWAffected
IdeaPad 3 15ABA7 Laptop BIOSLenovo
  • before JTCN54WWAffected
IdeaPad 3 17ABA7 Laptop BIOSLenovo
  • before JTCN54WWAffected
IdeaPad 3-14ALC6 Laptop BIOSLenovo
  • GLCN63WW and earlierAffected
IdeaPad 3-15ALC6 Laptop BIOSLenovo
  • GLCN63WW and earlierAffected
IdeaPad 3-17ALC6 Laptop BIOSLenovo
  • GLCN63WW and earlierAffected
ideapad 5-15ALC05 Laptop BIOSLenovo
  • before H2CN35WWAffected
IdeaPad Flex 5 14ABR8 BIOSLenovo
  • before L7CN21WWAffected
IdeaPad Flex 5 14ALC7 Laptop BIOSLenovo
  • before JCCN40WWAffected
IdeaPad Flex 5 14IAU7 Laptop BIOSLenovo
  • before J7CN48WWAffected
IdeaPad Flex 5 14IRU8 BIOSLenovo
  • before L6CN24WWAffected
IdeaPad Flex 5 16ABR8 BIOSLenovo
  • before L7CN21WWAffected
IdeaPad Flex 5 16ALC7 BIOSLenovo
  • before JCCN40WWAffected
IdeaPad Flex 5 16IAU7 BIOSLenovo
  • before J7CN48WWAffected
IdeaPad Flex 5 16IRU8 BIOSLenovo
  • before L6CN24WWAffected
IdeaPad Slim 3 14ABR8 BIOSLenovo
  • KYCN32WW and earlierAffected
IdeaPad Slim 3 14AMN8 BIOSLenovo
  • before L1CN41WWAffected
IdeaPad Slim 3 15ABR8 BIOSLenovo
  • KYCN32WW and earlierAffected
IdeaPad Slim 3 15AMN8 BIOSLenovo
  • before L1CN41WWAffected
IdeaPad Slim 3 16ABR8 BIOSLenovo
  • KYCN32WW and earlierAffected
IdeaPad Slim 5 Light 14ABR8 BIOSLenovo
  • L9CN26WW and earlierAffected
K14 G2 IRU BIOSLenovo
  • before MMCN36WWAffected
Lenovo Flex 7 14IAU7 BIOSLenovo
  • before J7CN48WWAffected
Lenovo Flex 7 14IRU8 BIOSLenovo
  • before L6CN24WWAffected
Lenovo V14 G3 ABA Laptop BIOSLenovo
  • before JTCN54WWAffected
Lenovo V14 G4 ABP BIOSLenovo
  • before MSCN16WWAffected
Lenovo V14 G4 AMN BIOSLenovo
  • before L1CN41WWAffected
Lenovo V15 G3 ABA Laptop BIOSLenovo
  • before JTCN54WWAffected
Lenovo V15 G4 ABP BIOSLenovo
  • before MSCN16WWAffected
Lenovo V15 G4 AMN BIOSLenovo
  • before L1CN41WWAffected
ThinkBook 13s G4 ARB BIOSLenovo
  • before HZCN55WWAffected
ThinkBook 13s G4 IAP BIOSLenovo
  • before HWCN52WWAffected
ThinkBook 13x G2 IAP Laptop BIOSLenovo
  • before HXCN57WWAffected
ThinkBook 14 G6 ABP BIOSLenovo
  • before MNCN27WWAffected
ThinkBook 14 G6 IRL BIOSLenovo
  • before MMCN36WWAffected
ThinkBook 16 G6 ABP BIOSLenovo
  • before MNCN27WWAffected
ThinkBook 16 G6 IRL BIOSLenovo
  • before MMCN36WWAffected
V14 G2-ALC Laptop (Lenovo) BIOSLenovo
  • GLCN63WW and earlierAffected
V15 G2-ALC Laptop (Lenovo) BIOSLenovo
  • GLCN63WW and earlierAffected
Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOSLenovo
  • before GZCN36WWAffected
Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOSLenovo
  • before GZCN36WWAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.