CVE-2019-6172: Lenovo 130-14ikb Firmware

Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.

Affected products

• Lenovo 130-14ikb Firmware: affected versions not specified
• Lenovo 130-15ikb Firmware: affected versions not specified
• Lenovo 330-14ikb Firmware: affected versions not specified
• Lenovo 330-14ikbr Firmware: affected versions not specified
• Lenovo 330-15ich Firmware: affected versions not specified
• Lenovo 330-15ikb Firmware: affected versions not specified
• Lenovo 330-15ikbr Firmware: affected versions not specified
• Lenovo 330-15ikbr Touch Firmware: affected versions not specified
• Lenovo 330-17ich Firmware: affected versions not specified
• Lenovo 330-17ikb Firmware: affected versions not specified
• Lenovo 330-17ikbr Firmware: affected versions not specified
• Lenovo 330c-14ikb Firmware: affected versions not specified
• Lenovo 330c-15ikb Firmware: affected versions not specified
• Lenovo 330c-15ikbr Firmware: affected versions not specified
• Lenovo 340c-15ikb Firmware: affected versions not specified
• Lenovo 340c-15iwl Firmware: affected versions not specified
• Lenovo 510-15ikl Firmware: affected versions not specified
• Lenovo 510s-08ikl Firmware: affected versions not specified
• Lenovo 530s-14ikb Firmware: affected versions not specified
• Lenovo 530s-14iwl Firmware: affected versions not specified
• Lenovo 530s-15ikb Firmware: affected versions not specified
• Lenovo 530s-15iwl Firmware: affected versions not specified
• Lenovo 63 Firmware: affected versions not specified
• Lenovo 720s-14ikbr Firmware: affected versions not specified
• Lenovo 720s-15ikb Firmware: affected versions not specified
• and 367 more

Published 2019-11-12. Last modified 2026-06-17.