8.4
Élevée
CVE-2025-10238 During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some…
Description
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS 1.12 | premières → < 1.12 | 1.12 |
| X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS 1.15 | premières → < 1.15 | 1.15 |
| P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS | Versions non publiées | |
| L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS 1.40 | premières → < 1.40 | 1.40 |
| T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS 1.11 | premières → < 1.11 | 1.11 |
| P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS | Versions non publiées | |
| L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS 1.15 | premières → < 1.15 | 1.15 |
| L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS 1.14 | premières → < 1.14 | 1.14 |
| E16 Gen 3 (Type 22AY, 22B0) Laptop (ThinkPad) BIOS 1.38 | premières → < 1.38 | 1.38 |