CVE-2022-1890 is a high-severity buffer overflow vulnerability in the ReadyBootDxe driver affecting various Lenovo Notebook products. An attacker with local privileges can exploit this flaw to achieve arbitrary code execution, posing a significant risk to system integrity. While no public exploit code or active exploitation has been observed, the vulnerability has garnered notable community discussion and media coverage, indicating awareness within the cybersecurity community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< cjcn38wwCPE matchmatch criteria | cpe:2.3:o:lenovo:thinkbook_14-iml_firmware:*:*:*:*:*:*:*:* | ||
< djcn28wwCPE matchmatch criteria | cpe:2.3:o:lenovo:thinkbook_14-iil_firmware:*:*:*:*:*:*:*:* | ||
< djcn28wwCPE matchmatch criteria | cpe:2.3:o:lenovo:thinkbook_15-iil_firmware:*:*:*:*:*:*:*:* | ||
< cjcn38wwCPE matchmatch criteria | cpe:2.3:o:lenovo:thinkbook_15-iml_firmware:*:*:*:*:*:*:*:* | ||
< chcn28wwCPE matchmatch criteria | cpe:2.3:o:lenovo:yoga_c640-13iml_lte_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.