Lenovo (ThinkPad) ThinkPad X1 Yoga Gen 7/ThinkPad X1 Carbon Gen 10

Lenovo ThinkPad X1 Yoga Gen 7/X1 Carbon Gen 10 Corporate ME Firmware N3ARG07W, 16.1.32.2418

Atom Feed

Version 1.32.2418
2024-08-19 23:13:53

Intel Platform Update 2024.3 Product Version Maintenance Release

Corporate Version 16.1.32.2418 (LVFS: 1.32.2418)

Problem Fixes

  • Mitigated the following security vulnerabilities under issues. Please see fixed issues for details.

Urgency high
Reported Success 95% (medium confidence)
Fixed issues:
  • CVE-2023-38655

    Improper buffer restrictions in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable denial of service via network access.

  • CVE-2023-34424

    Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of service via local access.

  • CVE-2024-21844

    Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access.

  • CVE-2023-48361

    Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via local access.

  • CVE-2023-40067

    Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

  • INTEL-TA-00999
Licenses
Security
Release Gating
Download Archive More details

LVFS © 2015 Richard Hughes with icons from Font Awesome and GeoIP data from IP2Location.

Linux Vendor Firmware Service Project a Series of LF Projects, LLC :: Charter