CVE-2023-34419

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Aug 17, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-34427.5A missing authorization vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited sucCVE-2023-344207.2A valid, authenticated LXCA user with elevated privileges may be able to execute command injections through crafted calls to a specific web CVE-2023-344216.5A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically crafted web API callCVE-2023-344226.5A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a specifically crafteCVE-2023-344236.1Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script maCVE-2023-344244.4Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of service via local aCVE-2023-344259.8The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7CVE-2023-344269.8A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially craftCVE-2023-344277.8Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an autCVE-2023-344297.5Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.CVE-2023-34434.3An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.CVE-2023-344307.8Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potenti
CVE-2023-34419: Medium severity, CVSS 6.7 | Vulnix