CVE-2022-1890 MEDIUM

CVE-2022-1890

Vendor Lenovo
Product BIOS
Weakness CWE-122
Published January 23, 2023
Last update April 1, 2025
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Key dates

02Disclosure timeline

January 23, 2023 CVE published
April 1, 2025 Record updated