SLTechnology News&Howtos › IT Information ›

Lenovo releases BIOS 1.47 update for ThinkPad X13S to fix high-risk vulnerabilities such as memory corruption / information leakage

Shulou Source: shulou.com Published: 2023-11-24 13:55:10 11月13日 Update

CTOnews.com, January 7-in a recent security announcement, Lenovo released a BIOS version 1.47 update (N3HET75W) for ThinkPad X13s, fixing many high-risk vulnerabilities, including memory corruption and information leaks.

The vulnerabilities disclosed by Lenovo in the security announcement include:

CVE-2022-40516

CVE-2022-40517

CVE-2022-40518

CVE-2022-40519

CVE-2022-40520

CVE-2022-4432

CVE-2022-4433

CVE-2022-4434

CVE-2022-4435

CTOnews.com learned from Lenovo's official security announcement that these vulnerabilities mainly include:

CVE-2022-40516, CVE-2022-40517, CVE-2022-40520:

Qualcomm has reported several stack-based buffer overflow vulnerabilities in Qualcomm's BIOS that allow local attackers to gain privileges, resulting in memory corruption.

CVE-2022-40518, CVE-2022-40519:

Qualcomm has reported several buffer overread vulnerabilities in Qualcomm's BIOS, which could allow highly privileged local attackers to cause information disclosure.

CVE-2022-4432, CVE-2022-4433, CVE-2022-4434, CVE-2022-4435:

Several buffer overread vulnerabilities have been reported in ThinkPad X13s BIOS that may allow for highly privileged local attackers to cause information disclosure.