CVE-2023-5080: Lenovo Tab m10 Plus Gen 3 TB125FU Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications access to device identifiers and system commands.

Affected products

• Lenovo Tab m10 Plus Gen 3 TB125FU Firmware: before tb125fu_usr_s100116_2311171525_mp1rc_row (fixed in tb125fu_usr_s100116_2311171525_mp1rc_row)
• Lenovo Tab m8 Hd TB8505F Firmware: before 8505f_usr_s301106_2309140042_v9.56_bmp_row (fixed in 8505f_usr_s301106_2309140042_v9.56_bmp_row)
• Lenovo Tab m8 Hd TB8505FS Firmware: before 8505fs_usr_s301107_2309140028_v9.56_bmp_row (fixed in 8505fs_usr_s301107_2309140028_v9.56_bmp_row)
• Lenovo Tab m8 Hd TB8505X Firmware: before 8505x_usr_s301129_2309141226_v9.56_bmp_row (fixed in 8505x_usr_s301129_2309141226_v9.56_bmp_row)
• Lenovo Tab m8 Hd TB8505XS Firmware: before 8505xs_usr_s301077_2309140036_v9.56_bmp_row (fixed in 8505xs_usr_s301077_2309140036_v9.56_bmp_row)
• Lenovo Tab p11 Pro Gen 2 TB132FU Firmware: before tb132fu_s240219_231123_row (fixed in tb132fu_s240219_231123_row)

Published 2024-01-19. Last modified 2026-06-17.