Shulou(Shulou.com)11/24 Report--

CTOnews.com, January 7-in a recent security announcement, Lenovo released a BIOS version 1.47 update (N3HET75W) for ThinkPad X13s, fixing many high-risk vulnerabilities, including memory corruption and information leaks.

The vulnerabilities disclosed by Lenovo in the security announcement include:

CVE-2022-40516

CVE-2022-40517

CVE-2022-40518

CVE-2022-40519

CVE-2022-40520

CVE-2022-4432

CVE-2022-4433

CVE-2022-4434

CVE-2022-4435

CTOnews.com learned from Lenovo's official security announcement that these vulnerabilities mainly include:

CVE-2022-40516, CVE-2022-40517, CVE-2022-40520:

Qualcomm has reported several stack-based buffer overflow vulnerabilities in Qualcomm's BIOS that allow local attackers to gain privileges, resulting in memory corruption.

CVE-2022-40518, CVE-2022-40519:

Qualcomm has reported several buffer overread vulnerabilities in Qualcomm's BIOS, which could allow highly privileged local attackers to cause information disclosure.

CVE-2022-4432, CVE-2022-4433, CVE-2022-4434, CVE-2022-4435:

Several buffer overread vulnerabilities have been reported in ThinkPad X13s BIOS that may allow for highly privileged local attackers to cause information disclosure.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.