01 Record

CVE-2024-3100

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

MediumPUBLISHEDCNA: lenovo

CNA base score6.7 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.17% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 6.4% of scored records. A rank, not a probability.

NVD base score

6.7 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-09-13 17:26Z2 YR AGO

Last updated

2024-09-17 14:38Z2 YR AGO

Reserved

2024-03-29

Assigning CNA

lenovo

Record state

PUBLISHED

Severity

Medium (CVSS 6.7)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-121Stack-based Buffer OverflowVariant

Data version

5.1

Document digest

ba19fe975a2abeddf80dc8c8d29e1839c2b6c0f93a14b4ed1e6c11138eee81c0

05 Affected products

VendorProductVersionsPlatforms

Lenovo100w Gen 3 Laptop (Lenovo) BIOS0 to < GACN48WW—

Lenovo100w Gen 4 Laptop (Lenovo) BIOS0 to < L2CN34WW/L3CN34WW—

Lenovo13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS0 to < JACN41WW—

Lenovo13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS0 to < KBCN29WW—

Lenovo14W Gen 2 Laptop (Lenovo) BIOS0 to < H0CN29WW—

Lenovo300w Gen 3 Laptop (Lenovo) BIOS0 to < GACN48WW—

Lenovo300w Yoga Gen 4 Laptop (Lenovo) BIOS0 to < L2CN34WW/L3CN34WW—

Lenovo500w Yoga Gen 4 Laptop (Lenovo) BIOS0 to < L2CN34WW/L3CN34WW—

LenovoFlex 5-14ITL05 Laptop (ideapad) BIOS0 to < FXCN47WW—

LenovoFlex 5-15ITL05 Laptop (ideapad) BIOS0 to < FXCN47WW—

LenovoIdeaPad 1 14ALC7 Laptop BIOS0 to < JTCN54WW—

LenovoIdeaPad 1 15ALC7 Laptop BIOS0 to < JTCN54WW—

LenovoIdeaPad 1-11IGL05 Laptop BIOS0 to < DWCN31WW—

LenovoIdeaPad 1-14IGL05 Laptop BIOS0 to < DWCN31WW—

LenovoIdeaPad 3 14ABA7 Laptop BIOS0 to < JTCN54WW—

LenovoIdeaPad 3 15ABA7 Laptop BIOS0 to < JTCN54WW—

LenovoIdeaPad 3 17ABA7 Laptop BIOS0 to < JTCN54WW—

LenovoIdeaPad 3-14ALC6 Laptop BIOS0 to GLCN63WW—

LenovoIdeaPad 3-15ALC6 Laptop BIOS0 to GLCN63WW—

LenovoIdeaPad 3-17ALC6 Laptop BIOS0 to GLCN63WW—

Lenovoideapad 5-15ALC05 Laptop BIOS0 to < H2CN35WW—

LenovoIdeaPad Flex 5 14ABR8 BIOS0 to < L7CN21WW—

LenovoIdeaPad Flex 5 14ALC7 Laptop BIOS0 to < JCCN40WW—

LenovoIdeaPad Flex 5 14IAU7 Laptop BIOS0 to < J7CN48WW—

LenovoIdeaPad Flex 5 14IRU8 BIOS0 to < L6CN24WW—

LenovoIdeaPad Flex 5 16ABR8 BIOS0 to < L7CN21WW—

LenovoIdeaPad Flex 5 16ALC7 BIOS0 to < JCCN40WW—

LenovoIdeaPad Flex 5 16IAU7 BIOS0 to < J7CN48WW—

LenovoIdeaPad Flex 5 16IRU8 BIOS0 to < L6CN24WW—

LenovoIdeaPad Slim 3 14ABR8 BIOS0 to KYCN32WW—

LenovoIdeaPad Slim 3 14AMN8 BIOS0 to < L1CN41WW—

LenovoIdeaPad Slim 3 15ABR8 BIOS0 to KYCN32WW—

LenovoIdeaPad Slim 3 15AMN8 BIOS0 to < L1CN41WW—

LenovoIdeaPad Slim 3 16ABR8 BIOS0 to KYCN32WW—

LenovoIdeaPad Slim 5 Light 14ABR8 BIOS0 to L9CN26WW—

LenovoK14 G2 IRU BIOS0 to < MMCN36WW—

LenovoLenovo Flex 7 14IAU7 BIOS0 to < J7CN48WW—

LenovoLenovo Flex 7 14IRU8 BIOS0 to < L6CN24WW—

LenovoLenovo V14 G3 ABA Laptop BIOS0 to < JTCN54WW—

LenovoLenovo V14 G4 ABP BIOS0 to < MSCN16WW—

LenovoLenovo V14 G4 AMN BIOS0 to < L1CN41WW—

LenovoLenovo V15 G3 ABA Laptop BIOS0 to < JTCN54WW—

LenovoLenovo V15 G4 ABP BIOS0 to < MSCN16WW—

LenovoLenovo V15 G4 AMN BIOS0 to < L1CN41WW—

LenovoThinkBook 13s G4 ARB BIOS0 to < HZCN55WW—

LenovoThinkBook 13s G4 IAP BIOS0 to < HWCN52WW—

LenovoThinkBook 13x G2 IAP Laptop BIOS0 to < HXCN57WW—

LenovoThinkBook 14 G6 ABP BIOS0 to < MNCN27WW—

LenovoThinkBook 14 G6 IRL BIOS0 to < MMCN36WW—

LenovoThinkBook 16 G6 ABP BIOS0 to < MNCN27WW—

LenovoThinkBook 16 G6 IRL BIOS0 to < MMCN36WW—

LenovoV14 G2-ALC Laptop (Lenovo) BIOS0 to GLCN63WW—

LenovoV15 G2-ALC Laptop (Lenovo) BIOS0 to GLCN63WW—

LenovoYoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS0 to < GZCN36WW—

LenovoYoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS0 to < GZCN36WW—

lenovoideapad_1-11igl05_firmware0 to < dwcn31ww—

lenovoflex_5-14itl05_firmware0 to < fxcn47ww—

lenovo100w_gen_3_firmware0 to < gacn48ww—

lenovoyoga_slim_7_pro-14ach5_o_firmware0 to < gzcn36ww—

lenovo14w_gen_2_firmware0 to < h0cn29ww—

19 further entries not shown. The complete list is in the raw JSON document.

06 References

support.lenovo.comhttps://support.lenovo.com/us/en/product_security/LEN-165524

07 Remediation

Update system firmware to the version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-165524