CVE-2024-5474

5.5 mediumEPSS 0.1%

Medium (5.5) in lenovo dolby vision provisioning. EPSS 0.1% chance of exploitation in the next 30 days.

A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versions are not affected by this issue.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2024-10-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lenovo:dolby_vision_provisioning

References

https://support.lenovo.com/us/en/product_security/LEN-158394

Check your stack JSON