A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attack…

published 2023-11-08 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-47980

cvss: 4.4; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 13%
public exploits: 0; none known

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges

to disclose sensitive information.

Patch / fix

fixed in 20

lenovo ideacentre_c5-14imb05_firmware o4hkt3ca
lenovo ideacentre_3-07ada05_firmware o4fkt39a
lenovo ideacentre_3-07imb05_firmware m2vkt21a
lenovo ideacentre_5_14iab7_firmware m42kt46a
lenovo ideacentre_5_14irb8_firmware m4ukt36a
lenovo thinkcentre_neo_70t_gen_3_firmware m40kt45a
lenovo thinkcentre_neo_50t_gen_3_firmware m42kt46a
lenovo thinkcentre_neo_50a_24_gen_4_firmware o5xkt18a
lenovo thinkcentre_neo_50a_24_gen_3_firmware o5rkt41a
lenovo thinkcentre_neo_30a_27_gen_4_firmware o5nkt33a
lenovo thinkcentre_neo_30a_27_gen_3_firmware o5nkt33a
lenovo thinkcentre_neo_30a_24_gen_4_firmware o5nkt33a
lenovo thinkcentre_neo_30a_24_gen_3_firmware o5nkt33a
lenovo thinkcentre_neo_30a_22_gen_4_firmware o5nkt33a
lenovo thinkcentre_neo_30a_22_gen_3_firmware o5nkt33a
lenovo thinkcentre_m920z_all-in-one_firmware m1mkt56a
lenovo thinkcentre_m90t_gen_3_firmware m40kt45a
lenovo thinkcentre_m90t_firmware m2tkt55a
lenovo thinkcentre_m90s_gen_3_firmware m40kt45a
lenovo thinkcentre_m90s_firmware m2tkt55a

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 2 y ago (2024-09-03)

Exploit prediction

0.23% chance of exploitation in the next 30 days, higher than 13% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	4.4	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
NVD	3.1	4.4	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

Lenovo Desktop BIOS

Classification

Weakness

CWE-126 Buffer Over-read
CWE-125 Out-of-bounds Read

References

support.lenovo.com /us/en/product_security/LEN-141775
vendor-advisory

Sources

CVE List CVE-2023-43574
NVD CVE-2023-43574

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary