Skip to content
Sign in
8.4 High

CVE-2025-10237 During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller…

Description

During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.

Affected products and versions

Product Affected versions Fixed in
X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS 1.11 earliest → < 1.11 1.11
X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS 1.15 earliest → < 1.15 1.15
P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS 1.16 earliest → 1.16 No fix stated
L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS 1.40 earliest → < 1.40 1.40
T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS 1.11 earliest → < 1.11 1.11
P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS Versions not published
L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS 1.15 earliest → < 1.15 1.15
L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS 1.14 earliest → < 1.14 1.14
L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS 1.13 earliest → < 1.13 1.13
Show the 86 other branches
Product Affected versions Fixed in
X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS 1.09 earliest → < 1.09 1.09
T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS 1.09 earliest → < 1.09 1.09
X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS 1.46 earliest → < 1.46 1.46
X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS 1.26 earliest → < 1.26 1.26
Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS 1.37 earliest → < 1.37 1.37
P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS Versions not published
X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS 1.37 earliest → < 1.37 1.37
T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS 1.28 earliest → < 1.28 1.28
P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS 1.47 earliest → < 1.47 1.47
P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS Versions not published
P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS Versions not published
P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS Versions not published
X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS 1.22 earliest → < 1.22 1.22
P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS 1.52 earliest → < 1.52 1.52
T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS 1.23 earliest → < 1.23 1.23
L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS 1.34 earliest → < 1.34 1.34
L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS 1.24 earliest → < 1.24 1.24
X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS Versions not published
S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS 1.28 earliest → < 1.28 1.28
L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS 1.27 earliest → < 1.27 1.27
X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS 1.38 earliest → < 1.38 1.38
T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS Versions not published
P15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOS 1.28 earliest → 1.28 No fix stated
P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOS 1.70 earliest → 1.70 No fix stated
X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS 1.39 earliest → < 1.39 1.39
X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS 1.21 earliest → < 1.21 1.21
T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS 1.15 earliest → < 1.15 1.15
L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS 1.27 earliest → < 1.27 1.27
T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS Versions not published
T15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOS 1.68 earliest → 1.68 No fix stated
P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS Versions not published
T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS 1.51 earliest → < 1.51 1.51
Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS 1.76 earliest → < 1.76 1.76
T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS 1.49 earliest → < 1.49 1.49
L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS 1.44 earliest → < 1.44 1.44
X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS 1.25 earliest → < 1.25 1.25
L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS 1.31 earliest → < 1.31 1.31
X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS Versions not published
ThinkPad S2 Gen 7 Type 21BD BIOS 1.36 earliest → 1.36 No fix stated
X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS 1.53 earliest → < 1.53 1.53
L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS 1.36 earliest → < 1.36 1.36
ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS Versions not published
X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS 1.76 earliest → < 1.76 1.76
X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS Versions not published
X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS 1.65 earliest → < 1.65 1.65
L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS 1.36 earliest → < 1.36 1.36
T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS 1.98 earliest → 1.98 No fix stated
X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS 1.36 earliest → < 1.36 1.36
T15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOS 1.84 earliest → 1.84 No fix stated
P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS 1.33 earliest → < 1.33 1.33
ThinkPad S2 Yoga Gen 6 Type 21AG China Only BIOS 1.38 earliest → 1.38 No fix stated
X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS Versions not published
P17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOS 1.98 earliest → 1.98 No fix stated
X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS 1.38 earliest → < 1.38 1.38
X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS 1.69 earliest → < 1.69 1.69
X12 Detachable Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOS 1.40 earliest → 1.40 No fix stated
X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS 1.17 earliest → < 1.17 1.17
L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS 1.73 earliest → < 1.73 1.73
T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS 1.12 earliest → < 1.12 1.12
T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS 1.08 earliest → < 1.08 1.08
T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS Versions not published
X1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOS 1.35 earliest → 1.35 No fix stated
X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS Versions not published
T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS 1.38 earliest → < 1.38 1.38
T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS 1.34 earliest → 1.34 No fix stated
X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS Versions not published
X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS 1.41 earliest → < 1.41 1.41
X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS Versions not published
X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS Versions not published
X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS 1.87 earliest → 1.87 No fix stated
P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS 2.01 earliest → 2.01 No fix stated
T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS Versions not published
X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS Versions not published
L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS 1.53 earliest → < 1.53 1.53
L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS 1.45 earliest → < 1.45 1.45
L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS 1.21 earliest → < 1.21 1.21
P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS 1.17 earliest → < 1.17 1.17
L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS 1.10 earliest → < 1.10 1.10
L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS 1.06 earliest → < 1.06 1.06
T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS 1.10 earliest → < 1.10 1.10
P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS Versions not published
P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS 1.26 earliest → < 1.26 1.26
T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS 1.18 earliest → < 1.18 1.18
X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS Versions not published
T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS 1.16 earliest → < 1.16 1.16
P16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOS 1.20 earliest → 1.20 No fix stated

Other CVEs of X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS

The 2 CVEs of X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS →
CVE-2025-10238 During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some… 8.4 High
Track this CVE