Skip to content
Sign in
6.4 Medium

CVE-2019-6172 A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without…

Description

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.

Affected products and versions

Product Affected versions Fixed in
ThinkPad Versions not published

Other CVEs of ThinkPad

The 9 CVEs of ThinkPad →
CVE-2023-5078 A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated… 6.7 Medium CVE-2022-48189 An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium CVE-2022-4574 An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium CVE-2023-4030 A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause… 8.4 High
Track this CVE