PT-2025-1584 · Lenovo · Lenovo Browser+2

Gareth Evans + 1 · Published 2025-01-14 · Updated 2025-01-17 · CVE-2024-10254

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Lenovo PC Manager (affected versions not specified) Lenovo Browser (affected versions not specified) Lenovo App Store (affected versions not specified)

Description A potential buffer overflow issue was reported that could allow a local attacker to cause a system crash. This issue affects Lenovo PC Manager, Lenovo Browser, and Lenovo App Store.

Recommendations For Lenovo PC Manager, consider restricting access to sensitive system resources until a patch is available. For Lenovo Browser, as a temporary workaround, consider disabling any features that may trigger the buffer overflow issue until a patch is available. For Lenovo App Store, restrict access to the app store to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2024-10254

Affected Products

Lenovo App Store

Lenovo Browser

Lenovo Pcmanager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-10254 · Security Note
• https://t.me/cvenotify/107391 · Telegram Post
• https://twitter.com/CVEnew/status/1879290697158640014 · Twitter Post
• https://iknow.lenovo.com.cn/detail/425367 · Note
• https://t.me/cvedetector/15379 · Telegram Post
• https://twitter.com/kryc_uk/status/1880278143870914998 · Twitter Post