CVE-2025-4657

published 2025-07-17

CVE-2025-4657: A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and…

high 8.4 CVSS 4.0

AV L AC L AT N PR H UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
lenovo	app_store	< 9.0.2230.0617	9.0.2230.0617
lenovo	browser	< 9.0.6.5061	9.0.6.5061
lenovo	pc_manager	< 5.1.110.5082	5.1.110.5082

CWE-122