CVE-2025-4657

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-465702.6vLLM is an inference and serving engine for large language models (LLMs). Prior to version 0.9.0, when a new prompt is processed, if the Pag CVE-2025-465715.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, low privileged us CVE-2025-465729.3passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to CVE-2025-465738.6passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to CVE-2025-465745.3There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system CVE-2025-465757.5There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system CVE-2025-465766.5There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to byp CVE-2025-465777.5There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information.CVE-2025-465787.5There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to i CVE-2025-465797.8There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and whe CVE-2025-46589.8Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verif CVE-2025-465807.5There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation o