CVE-2025-4657
Medium
Description
A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.
SeverityMedium
CVSS6.7
Exploit probability—
ProductBrowser
PublishedJul 17, 2025
First seenJul 17, 2025
Weakness typeCWE-122CWE-122
How to fix
Update
- Lenovo Browser9.0.6.5061 or later
- Lenovo PC Manager5.1.110.5082 or later
- Lenovo App Store9.0.2230.0617 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo Browser | v < 9.0.6.5061 | 9.0.6.5061 |
| Lenovo PC Manager | v < 5.1.110.5082 | 5.1.110.5082 |
| Lenovo App Store | v < 9.0.2230.0617 | 9.0.2230.0617 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.