CVE-2023-34419 (legion_5-15ach6_firmware, legion_5-15ach6a_firmware, legion_5-15ach6h_firmware, legion_5-15ith6_firmware, legion_5-15ith6h_firmware, legion_5-17ach6_firmware, legion_5-17ach6h_firmware, legion_5-17ith6_firmware, legion_5-17ith6h_firmware, legion_5_15arh7_firmware, legion_5_15arh7h_firmware, legion_5_15iah7_firmware, legion_5_15iah7h_firmware, legion_5_pro-16ach6_firmware, legion_5_pro-16ach6h_firmware, legion_5_pro-16ith6_firmware, legion_5_pro-16ith6h_firmware, legion_5_pro_16arh7_firmware, legion_5_pro_16arh7h_firmware, legion_5_pro_16iah7_firmware, legion_5_pro_16iah7h_firmware, legion_7-16achg6_firmware, legion_7-16arha7_firmware, legion_7-16ithg6_firmware, legion_pro_5_16irx8_firmware, legion_pro_7_16irx8_firmware, legion_pro_7_16irx8h_firmware, legion_s7_16arha7_firmware, thinkbook_15p_g2_ith_firmware, thinkbook_16p_g3_arh_firmware)

A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.Read More