Skip to content
Fencer Vulns
medium 6.7

CVE-2024-3100 json

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated pri…

published 2024-09-13 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-31703

cvss
6.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 6%
public exploits
0
none known

Summary

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

Patch / fix

  • Lenovo 100w Gen 3 Laptop (Lenovo) BIOS GACN48WW
  • Lenovo 100w Gen 4 Laptop (Lenovo) BIOS L2CN34WW/L3CN34WW
  • Lenovo 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS JACN41WW
  • Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS KBCN29WW
  • Lenovo 14W Gen 2 Laptop (Lenovo) BIOS H0CN29WW
  • Lenovo 300w Gen 3 Laptop (Lenovo) BIOS GACN48WW
  • Lenovo 300w Yoga Gen 4 Laptop (Lenovo) BIOS L2CN34WW/L3CN34WW
  • Lenovo 500w Yoga Gen 4 Laptop (Lenovo) BIOS L2CN34WW/L3CN34WW
  • Lenovo Flex 5-14ITL05 Laptop (ideapad) BIOS FXCN47WW
  • Lenovo Flex 5-15ITL05 Laptop (ideapad) BIOS FXCN47WW
  • Lenovo IdeaPad 1 14ALC7 Laptop BIOS JTCN54WW
  • Lenovo IdeaPad 1 15ALC7 Laptop BIOS JTCN54WW
  • Lenovo IdeaPad 1-11IGL05 Laptop BIOS DWCN31WW
  • Lenovo IdeaPad 1-14IGL05 Laptop BIOS DWCN31WW
  • Lenovo IdeaPad 3 14ABA7 Laptop BIOS JTCN54WW
  • Lenovo IdeaPad 3 15ABA7 Laptop BIOS JTCN54WW
  • Lenovo IdeaPad 3 17ABA7 Laptop BIOS JTCN54WW
  • Lenovo ideapad 5-15ALC05 Laptop BIOS H2CN35WW
  • Lenovo IdeaPad Flex 5 14ABR8 BIOS L7CN21WW
  • Lenovo IdeaPad Flex 5 14ALC7 Laptop BIOS JCCN40WW
  • Lenovo IdeaPad Flex 5 14IAU7 Laptop BIOS J7CN48WW
  • Lenovo IdeaPad Flex 5 14IRU8 BIOS L6CN24WW
  • Lenovo IdeaPad Flex 5 16ABR8 BIOS L7CN21WW
  • Lenovo IdeaPad Flex 5 16ALC7 BIOS JCCN40WW
  • Lenovo IdeaPad Flex 5 16IAU7 BIOS J7CN48WW
  • Lenovo IdeaPad Flex 5 16IRU8 BIOS L6CN24WW
  • Lenovo IdeaPad Slim 3 14AMN8 BIOS L1CN41WW
  • Lenovo IdeaPad Slim 3 15AMN8 BIOS L1CN41WW
  • Lenovo K14 G2 IRU BIOS MMCN36WW
  • Lenovo Lenovo Flex 7 14IAU7 BIOS J7CN48WW

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.17% chance of exploitation in the next 30 days, higher than 6% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Lenovo 100w Gen 3 Laptop (Lenovo) BIOS
  • Lenovo 100w Gen 4 Laptop (Lenovo) BIOS
  • Lenovo 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS
  • Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS
  • Lenovo 14W Gen 2 Laptop (Lenovo) BIOS
  • Lenovo 300w Gen 3 Laptop (Lenovo) BIOS
  • Lenovo 300w Yoga Gen 4 Laptop (Lenovo) BIOS
  • Lenovo 500w Yoga Gen 4 Laptop (Lenovo) BIOS
  • Lenovo Flex 5-14ITL05 Laptop (ideapad) BIOS
  • Lenovo Flex 5-15ITL05 Laptop (ideapad) BIOS
  • Lenovo IdeaPad 1 14ALC7 Laptop BIOS
  • Lenovo IdeaPad 1 15ALC7 Laptop BIOS
  • Lenovo IdeaPad 1-11IGL05 Laptop BIOS
  • Lenovo IdeaPad 1-14IGL05 Laptop BIOS
  • Lenovo IdeaPad 3 14ABA7 Laptop BIOS
  • Lenovo IdeaPad 3 15ABA7 Laptop BIOS
  • Lenovo IdeaPad 3 17ABA7 Laptop BIOS
  • Lenovo IdeaPad 3-14ALC6 Laptop BIOS
  • Lenovo IdeaPad 3-15ALC6 Laptop BIOS
  • Lenovo IdeaPad 3-17ALC6 Laptop BIOS
  • Lenovo ideapad 5-15ALC05 Laptop BIOS
  • Lenovo IdeaPad Flex 5 14ABR8 BIOS
  • Lenovo IdeaPad Flex 5 14ALC7 Laptop BIOS
  • Lenovo IdeaPad Flex 5 14IAU7 Laptop BIOS
  • Lenovo IdeaPad Flex 5 14IRU8 BIOS
  • Lenovo IdeaPad Flex 5 16ABR8 BIOS
  • Lenovo IdeaPad Flex 5 16ALC7 BIOS
  • Lenovo IdeaPad Flex 5 16IAU7 BIOS
  • Lenovo IdeaPad Flex 5 16IRU8 BIOS
  • Lenovo IdeaPad Slim 3 14ABR8 BIOS
  • Lenovo IdeaPad Slim 3 14AMN8 BIOS
  • Lenovo IdeaPad Slim 3 15ABR8 BIOS
  • Lenovo IdeaPad Slim 3 15AMN8 BIOS
  • Lenovo IdeaPad Slim 3 16ABR8 BIOS
  • Lenovo IdeaPad Slim 5 Light 14ABR8 BIOS
  • Lenovo K14 G2 IRU BIOS
  • Lenovo Lenovo Flex 7 14IAU7 BIOS
  • Lenovo Lenovo Flex 7 14IRU8 BIOS
  • Lenovo Lenovo V14 G3 ABA Laptop BIOS
  • Lenovo Lenovo V14 G4 ABP BIOS
  • Lenovo Lenovo V14 G4 AMN BIOS
  • Lenovo Lenovo V15 G3 ABA Laptop BIOS
  • Lenovo Lenovo V15 G4 ABP BIOS
  • Lenovo Lenovo V15 G4 AMN BIOS
  • Lenovo ThinkBook 13s G4 ARB BIOS
  • Lenovo ThinkBook 13s G4 IAP BIOS
  • Lenovo ThinkBook 13x G2 IAP Laptop BIOS
  • Lenovo ThinkBook 14 G6 ABP BIOS
  • Lenovo ThinkBook 14 G6 IRL BIOS
  • Lenovo ThinkBook 16 G6 ABP BIOS

Classification

Weakness
  • CWE-121 Stack-based Buffer Overflow

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.