Medium severity6.7NVD Advisory· Published Jan 26, 2023· Updated Jun 17, 2026

CVE-2022-1890

Description

A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Lenovo/Thinkbook 14 Iil Firmware
cpe:2.3:o:lenovo:thinkbook_14-iil_firmware:*:*:*:*:*:*:*:*
Range: <djcn28ww
Lenovo/Thinkbook 14 Iml Firmware
cpe:2.3:o:lenovo:thinkbook_14-iml_firmware:*:*:*:*:*:*:*:*
Range: <cjcn38ww
Lenovo/Thinkbook 15 Iil Firmware
cpe:2.3:o:lenovo:thinkbook_15-iil_firmware:*:*:*:*:*:*:*:*
Range: <djcn28ww
Lenovo/Thinkbook 15 Iml Firmware
cpe:2.3:o:lenovo:thinkbook_15-iml_firmware:*:*:*:*:*:*:*:*
Range: <cjcn38ww
Lenovo/Yoga C640 13iml Firmware
cpe:2.3:o:lenovo:yoga_c640-13iml_firmware:*:*:*:*:*:*:*:*
Range: <chcn28ww
Lenovo/Yoga C640 13iml Lte Firmware
cpe:2.3:o:lenovo:yoga_c640-13iml_lte_firmware:*:*:*:*:*:*:*:*
Range: <chcn28ww
Lenovo/Notebook productsllm-fuzzy
Lenovo/BIOScpe-rescue
Range: various