Local privilege escalation via unrestricted driver IOCTLs

Out-of-bounds write in Lenovo HardwareScan Plugin before 1.3.1.2 and Diagnostics before 4.45 lets local users elevate privileges. The LenovoDiagnosticsDriver exposes device IOCTLs to low-privilege callers, including operations that copy caller-supplied data into mapped physical memory and enable arbitrary physical or virtual memory reads and writes. Local access to an affected Windows host is required; successful exploitation converts ordinary user access into elevated code execution with control over system confidentiality, integrity, and availability.