A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated…

Description

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

Scores

EPSS (exploitation in 30 days)

0.17% · top 93% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.7.

Weakness

• CWE-121: Stack-based Buffer Overflow (opens in a new tab)All about CWE-121 and its CVEs

Affected products

• Lenovo · 100w Gen 3 Laptop (Lenovo) BIOS

  • affected < GACN48WW

• Lenovo · 100w Gen 4 Laptop (Lenovo) BIOS

  • affected < L2CN34WW/L3CN34WW

• Lenovo · 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS

  • affected < JACN41WW

• Lenovo · 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS

  • affected < KBCN29WW

• Lenovo · 14W Gen 2 Laptop (Lenovo) BIOS

  • affected < H0CN29WW

• Lenovo · 300w Gen 3 Laptop (Lenovo) BIOS

  • affected < GACN48WW

• Lenovo · 300w Yoga Gen 4 Laptop (Lenovo) BIOS

  • affected < L2CN34WW/L3CN34WW

• Lenovo · 500w Yoga Gen 4 Laptop (Lenovo) BIOS

  • affected < L2CN34WW/L3CN34WW

• Lenovo · Flex 5-14ITL05 Laptop (ideapad) BIOS

  • affected < FXCN47WW

• Lenovo · Flex 5-15ITL05 Laptop (ideapad) BIOS

  • affected < FXCN47WW

• Lenovo · IdeaPad 1 14ALC7 Laptop BIOS

  • affected < JTCN54WW

• Lenovo · IdeaPad 1 15ALC7 Laptop BIOS

  • affected < JTCN54WW

• Lenovo · IdeaPad 1-11IGL05 Laptop BIOS

  • affected < DWCN31WW

• Lenovo · IdeaPad 1-14IGL05 Laptop BIOS

  • affected < DWCN31WW

• Lenovo · IdeaPad 3 14ABA7 Laptop BIOS

  • affected < JTCN54WW

• Lenovo · IdeaPad 3 15ABA7 Laptop BIOS

  • affected < JTCN54WW

• Lenovo · IdeaPad 3 17ABA7 Laptop BIOS

  • affected < JTCN54WW

• Lenovo · IdeaPad 3-14ALC6 Laptop BIOS

  • affected ≤ GLCN63WW

• Lenovo · IdeaPad 3-15ALC6 Laptop BIOS

  • affected ≤ GLCN63WW

• Lenovo · IdeaPad 3-17ALC6 Laptop BIOS

  • affected ≤ GLCN63WW

• Lenovo · ideapad 5-15ALC05 Laptop BIOS

  • affected < H2CN35WW

• Lenovo · IdeaPad Flex 5 14ABR8 BIOS

  • affected < L7CN21WW

• Lenovo · IdeaPad Flex 5 14ALC7 Laptop BIOS

  • affected < JCCN40WW

• Lenovo · IdeaPad Flex 5 14IAU7 Laptop BIOS

  • affected < J7CN48WW

• Lenovo · IdeaPad Flex 5 14IRU8 BIOS

  • affected < L6CN24WW

• Lenovo · IdeaPad Flex 5 16ABR8 BIOS

  • affected < L7CN21WW

• Lenovo · IdeaPad Flex 5 16ALC7 BIOS

  • affected < JCCN40WW

• Lenovo · IdeaPad Flex 5 16IAU7 BIOS

  • affected < J7CN48WW

• Lenovo · IdeaPad Flex 5 16IRU8 BIOS

  • affected < L6CN24WW

• Lenovo · IdeaPad Slim 3 14ABR8 BIOS

  • affected ≤ KYCN32WW

• Lenovo · IdeaPad Slim 3 14AMN8 BIOS

  • affected < L1CN41WW

• Lenovo · IdeaPad Slim 3 15ABR8 BIOS

  • affected ≤ KYCN32WW

• Lenovo · IdeaPad Slim 3 15AMN8 BIOS

  • affected < L1CN41WW

• Lenovo · IdeaPad Slim 3 16ABR8 BIOS

  • affected ≤ KYCN32WW

• Lenovo · IdeaPad Slim 5 Light 14ABR8 BIOS

  • affected ≤ L9CN26WW

• Lenovo · K14 G2 IRU BIOS

  • affected < MMCN36WW

• Lenovo · Lenovo Flex 7 14IAU7 BIOS

  • affected < J7CN48WW

• Lenovo · Lenovo Flex 7 14IRU8 BIOS

  • affected < L6CN24WW

• Lenovo · Lenovo V14 G3 ABA Laptop BIOS

  • affected < JTCN54WW

• Lenovo · Lenovo V14 G4 ABP BIOS

  • affected < MSCN16WW

• Lenovo · Lenovo V14 G4 AMN BIOS

  • affected < L1CN41WW

• Lenovo · Lenovo V15 G3 ABA Laptop BIOS

  • affected < JTCN54WW

• Lenovo · Lenovo V15 G4 ABP BIOS

  • affected < MSCN16WW

• Lenovo · Lenovo V15 G4 AMN BIOS

  • affected < L1CN41WW

• Lenovo · ThinkBook 13s G4 ARB BIOS

  • affected < HZCN55WW

• Lenovo · ThinkBook 13s G4 IAP BIOS

  • affected < HWCN52WW

• Lenovo · ThinkBook 13x G2 IAP Laptop BIOS

  • affected < HXCN57WW

• Lenovo · ThinkBook 14 G6 ABP BIOS

  • affected < MNCN27WW

• Lenovo · ThinkBook 14 G6 IRL BIOS

  • affected < MMCN36WW

• Lenovo · ThinkBook 16 G6 ABP BIOS

  • affected < MNCN27WW

• Lenovo · ThinkBook 16 G6 IRL BIOS

  • affected < MMCN36WW

• Lenovo · V14 G2-ALC Laptop (Lenovo) BIOS

  • affected ≤ GLCN63WW

• Lenovo · V15 G2-ALC Laptop (Lenovo) BIOS

  • affected ≤ GLCN63WW

• Lenovo · Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS

  • affected < GZCN36WW

• Lenovo · Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS

  • affected < GZCN36WW

What to do

Solution: Update system firmware to the version (or newer) indicated for your model in the advisory:  https://support.lenovo.com/us/en/product_security/LEN-165524

References (1)

• https://support.lenovo.com/us/en/product_security/LEN-165524 (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-3100](https://trackcve.app/badge/CVE-2024-3100.svg)](https://trackcve.app/cve/CVE-2024-3100)

Record last updated 17 Sept 2024, 14:38 UTC.