CVE-2018-9063 is a local buffer overflow vulnerability in MapDrv.exe within Lenovo System Update versions prior to 5.07.0072. An attacker can trigger this by providing excessively long user IDs or passwords, leading to undefined behavior, including potential arbitrary code execution. Rated 7.8 HIGH, this vulnerability requires local access and user interaction (entering credentials), but does not grant additional privileges beyond the attacker's existing permissions. There is no public exploit code (Metasploit, Nuclei, ExploitDB), it is not in the KEV catalog, and community discussion and media coverage are minimal, suggesting low active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.07.0072CPE matchmatch criteria | cpe:2.3:a:lenovo:system_update:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.