CVE-2025-4657 — Lenovo / PC Manager

CVE-2025-4657

Lenovo / PC Manager PUBLISHED

Description (CNA)

A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Lenovo / PC Manager	affected 0 before 5.1.110.5082
Lenovo / Browser	affected 0 before 9.0.6.5061
Lenovo / App Store	affected 0 before 9.0.2230.0617

CWE

CWE-122

References

https://iknow.lenovo.com.cn/detail/430155

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.