CVE-2019-10724 - CVE House
Back to Database
Status published Medium CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system...

Vulnerability Description

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642, AIO510-23ISH 6.0.1.8642, AIO520-22IKL 6.0.1.8642, AIO520-22IKU 6.0.1.8642, AIO520-24IKL 6.0.1.8642, AIO520-24IKU 6.0.1.8642, AIO520-27IKL 6.0.1.8642, AIO720-24IKB 6.0.1.8642, IdeaCentre 520S-23IKU 6.0.1.8642, ThinkCentre M700z 6.0.1.8642, ThinkCentre M800z 6.0.1.8642, ThinkCentre M810z 6.0.1.8642, ThinkCentre M818z 6.0.1.8642, ThinkCentre M900Z 6.0.1.8642, ThinkCentre M910z 6.0.1.8642, V410z(YT S4250) 6.0.1.8642, 330-14IKBR Win10:6.0.1.8652, 330-15IKBR Win10:6.0.1.8652, 330-15IKBR (Brazil) Win10:6.0.1.8652, 330-15IKBR Touch Win10:6.0.1.8652, 330-17IKBR Win10:6.0.1.8652, YOGA 730-13IKB Win10:6.0.1.8644, YOGA 730-15IKB Win10:6.0.1.8644, ThinkPad L560 6.0.1.8644 and 6.0.1.8652, ThinkPad L570 6.0.1.8644 and 6.0.1.8652, ThinkPad P50 6.0.1.8642, ThinkPad P50s 6.0.1.8642, ThinkPad P51s (20Jx, 20Kx) 6.0.1.8642, ThinkPad P51s (20Hx) 6.0.1.8642, ThinkPad P52s 6.0.1.8642, ThinkPad P70 6.0.1.8642, ThinkPad T25 6.0.1.8642, ThinkPad T460s 6.0.1.8642, ThinkPad T470 6.0.1.8642, ThinkPad T470s 6.0.1.8642, ThinkPad T480 6.0.1.8642, ThinkPad T480s 6.0.1.8642, ThinkPad T560 6.0.1.8642, ThinkPad T570 6.0.1.8642, ThinkPad T580 6.0.1.8642, ThinkPad X1 Carbon 8.66.76.72 and 8.66.68.54, ThinkPad X1 Carbon 6th 6.0.1.8642, ThinkPad X1 Carbon, X1 Yoga 8.66.62.92 and 8.66.62.54, ThinkPad X1 Tablet (20Gx) 6.0.1.8642, ThinkPad X1 Tablet (20Jx) 6.0.1.8642, ThinkPad X1 Tablet Gen 3 6.0.1.8642, ThinkPad X1 Yoga (20Jx) 8.66.88.60, ThinkPad X1 Yoga 3rd 6.0.1.8642, ThinkPad X280 6.0.1.8642, ThinkPad Yoga 260, S1 8.66.62.92 and 8.66.62.54.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10724

Credits & Attribution

No credits recorded in the NVD database.

References

More from lenovo

View All →
CVE-2021-42205
ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in...
Unknown 0
CVE-2019-19705
Realtek Audio Drivers for Windows, as used on the Lenovo...
Unknown 0
CVE-2016-5729
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary...
High 8.2
CVE-2016-5249
Lenovo Solution Center (LSC) before 3.3.003 allows local users to...
High 7.8
CVE-2016-5248
The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before...
Medium 5.5

Affected Vendor

Affected Software

legion y520t z370 firmware, aio310-20iap firmware, aio510-22ish firmware, aio510-23ish firmware, aio520-22ikl firmware, aio520-22iku firmware, aio520-24ikl firmware, aio520-24iku firmware, aio520-27ikl firmware, aio720-24ikb firmware, ideacentre 520s-23iku firmware, thinkcentre m700z firmware, thinkcentre m800z firmware, thinkcentre m810z firmware, thinkcentre m818z firmware, thinkcentre m900z firmware, thinkcentre m910z firmware, v410z\(yt s4250\) firmware, 100e 2nd gen firmware, 300e 2nd gen firmware, 330-14ikbr firmware, 330-15ikbr firmware, 330-15ikbr touch firmware, 330-17ikbr firmware, 720s touch-15ikb firmware, 720s-15ikb firmware, b330-15ikbr firmware, e43-80 firmware, e53-80 firmware, flex 5-1470\(r\) firmware, flex 5-1570\(r\) firmware, k42-80 firmware, k43c-80 firmware, miix 520-12ikb firmware, miix 525-12ikb firmware, v330-14ikb firmware, v330-14isk firmware, v330-15ikb firmware, v330-15isk firmware, v720-14 firmware, v730-15ikb firmware, yoga 520-14ikbr firmware, yoga 720-12ikb firmware, yoga 730-13ikb firmware, yoga 730-15ikb firmware, yoga book c930 firmware, yoga c930-13ikb firmware, yoga c930-13ikb glass firmware, thinkpad 11e firmware, thinkpad 11e yoga firmware, thinkpad 13 firmware, thinkpad a275 firmware, thinkpad a475 firmware, thinkpad e460 firmware, thinkpad e560 firmware, thinkpad e465 firmware, thinkpad e565 firmware, thinkpad e470 firmware, thinkpad e570 firmware, thinkpad e475 firmware, thinkpad e575 firmware, thinkpad e480 firmware, thinkpad e580 firmware, thinkpad e485 firmware, thinkpad e585 firmware, thinkpad s5 firmware, thinkpad l380 firmware, thinkpad l380 yoga firmware, thinkpad l460 firmware, thinkpad l470 firmware, thinkpad l480 firmware, thinkpad l580 firmware, thinkpad l560 firmware, thinkpad l570 firmware, thinkpad p40 firmware, thinkpad p50 firmware, thinkpad p50s firmware, thinkpad p51s firmware, thinkpad p52s firmware, thinkpad p70 firmware, thinkpad s3 yoga 14 firmware, thinkpad s3-s440 firmware, thinkpad e560p firmware, thinkpad t25 firmware, thinkpad t460 firmware, thinkpad t460p firmware, thinkpad t460s firmware, thinkpad t470 firmware, thinkpad t470p firmware, thinkpad t470s firmware, thinkpad t480 firmware, thinkpad t480s firmware, thinkpad t560 firmware, thinkpad t570 firmware, thinkpad t580 firmware, thinkpad x1 carbon firmware, thinkpad x1 yoga firmware, thinkpad x1 tablet firmware, thinkpad x1 yoga 3rd firmware, thinkpad x260 firmware, thinkpad x270 firmware, thinkpad x280 firmware, thinkpad x380 yoga firmware, thinkpad yoga 260 firmware, thinkpad yoga s1 firmware, thinkpad yoga 370 firmware, thinkpad s1 3rd firmware, yoga 14 firmware
Vulnerable Versions:
0

Timeline

Official Publish: August 28th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.