Skip to content
Sign in
6.7 Medium

CVE-2022-1108 A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1…

Description

A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.

Affected products and versions

Product Affected versions Fixed in
ThinkPad BIOS Versions not published

Other CVEs of ThinkPad BIOS

The 10 CVEs of ThinkPad BIOS →
CVE-2023-5078 A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated… 6.7 Medium CVE-2022-4575 A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models… 6.7 Medium CVE-2022-48189 An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium CVE-2022-4574 An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium
Track this CVE