Description (CNA)
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Lenovo / ThinkPad BIOS | affected various |
CWE
CWE-20
References
ADP enrichment
No English description supplied.