5.5
Medium
CVE-2024-5474 A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning…
Description
A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versions are not affected by this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dolby Vision Provisioning software 2.0 | earliest → < 2.0.0.2 | 2.0.0.2 |
| dolby_vision_provisioning_software 2.0 | earliest → < 2.0.0.2 | 2.0.0.2 |