GHSA-p7jf-pwjp-h977 · Severity: high — During an internal security assessment, a potential out-of-bounds write vulnerability was...
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).
Conclusion & alert: CVE-2025-10238 is rated Low Risk (34.5/100): CVSS High severity, with low exploitation likelihood (EPSS 0.12%). Mandatory action: Monitor for updates and reassess as exploit intelligence or EPSS changes.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.01% | 0.12% | +0.11% |
| 2 | 2026-06-11 | — | 0.01% | — |
Full EPSS history (2 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 8.4 | 4.0 | HIGH |
|
— | — | [email protected] |
| 6.7 | 3.1 | MEDIUM |
|
0.8 | 5.9 | [email protected] |
GHSA-p7jf-pwjp-h977 · Severity: high — During an internal security assessment, a potential out-of-bounds write vulnerability was...
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| lenovo | x13_gen_6_type_21rk_21rl_laptops_thinkpad_bios | >= 0, < 1.12 | cpe:2.3:h:lenovo:x13_gen_6_type_21rk_21rl_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_carbon_13th_gen_type_21nx_21ny_laptops_thinkpad_bios | >= 0, < 1.15 | cpe:2.3:h:lenovo:x1_carbon_13th_gen_type_21nx_21ny_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p16v_gen_3_type_21rs_21rt_laptop_thinkpad_bios | >= 0, < bios_1.13_ecfw_1.09 | cpe:2.3:h:lenovo:p16v_gen_3_type_21rs_21rt_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l16_gen_1_type_21l7_21l8_laptops_thinkpad_bios | >= 0, < 1.40 | cpe:2.3:h:lenovo:l16_gen_1_type_21l7_21l8_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t14s_gen_6_type_21tb_21tc_laptops_thinkpad_bios | >= 0, < 1.11 | cpe:2.3:h:lenovo:t14s_gen_6_type_21tb_21tc_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p14s_gen_6_type_21qt_21qu_laptops_thinkpad_bios | >= 0, < uefi_bios_v1.22_ecp_v1.13 | cpe:2.3:h:lenovo:p14s_gen_6_type_21qt_21qu_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l13_gen_6_type_21rb_21rc_laptops_thinkpad_bios | >= 0, < 1.15 | cpe:2.3:h:lenovo:l13_gen_6_type_21rb_21rc_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l14_gen_6_type_21se_21sf_laptops_thinkpad_bios | >= 0, < 1.14 | cpe:2.3:h:lenovo:l14_gen_6_type_21se_21sf_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | e16_gen_3_type_22ay_22b0_laptop_thinkpad_bios | >= 0, < 1.38 | cpe:2.3:h:lenovo:e16_gen_3_type_22ay_22b0_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l16_gen_2_type_21sc_21sd_laptops_thinkpad_bios | >= 0, < 1.13 | cpe:2.3:h:lenovo:l16_gen_2_type_21sc_21sd_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x13_gen_6_type_21rm_21rn_laptops_thinkpad_bios | >= 0, < 1.62_1.12 | cpe:2.3:h:lenovo:x13_gen_6_type_21rm_21rn_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t14s_gen_6_type_21r1_21r2_laptops_thinkpad_bios | >= 0, < 1.10 | cpe:2.3:h:lenovo:t14s_gen_6_type_21r1_21r2_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_2-in-1_gen_9_type_21ke_21kf_laptop_thinkpad_bios | >= 0, < 1.45 | cpe:2.3:h:lenovo:x1_2-in-1_gen_9_type_21ke_21kf_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_fold_16_gen_1_type_21es_21et_laptop_thinkpad_bios | >= 0, < 1.25 | cpe:2.3:h:lenovo:x1_fold_16_gen_1_type_21es_21et_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | z16_gen_2_type_21jx_21jy_laptop_thinkpad_bios | >= 0, < 1.37 | cpe:2.3:h:lenovo:z16_gen_2_type_21jx_21jy_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p16v_gen_1_type_21fe_21ff_laptop_thinkpad_bios | >= 0, < 1.65_1.13 | cpe:2.3:h:lenovo:p16v_gen_1_type_21fe_21ff_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x13_gen_4_type_21j3_21j4_laptop_thinkpad_bios | >= 0, < 1.37 | cpe:2.3:h:lenovo:x13_gen_4_type_21j3_21j4_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t14s_gen_4_type_21f8_21f9_laptop_thinkpad_bios | >= 0, < 1.28 | cpe:2.3:h:lenovo:t14s_gen_4_type_21f8_21f9_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p14s_gen_4_type_21k5_21k6_laptop_thinkpad_bios | >= 0, < 1.47 | cpe:2.3:h:lenovo:p14s_gen_4_type_21k5_21k6_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p1_gen_6_type_21fv_21fw_laptop_thinkpad_bios | >= 0, < 1.38 | cpe:2.3:h:lenovo:p1_gen_6_type_21fv_21fw_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p16v_gen_1_type_21fc_21fd_laptop_thinkpad_bios | >= 0, < bios_1.40_ecfw_1.09 | cpe:2.3:h:lenovo:p16v_gen_1_type_21fc_21fd_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p16_gen_2_type_21fa_21fb_laptop_thinkpad_bios | >= 0, < bios_1.61_ecfw_1.57 | cpe:2.3:h:lenovo:p16_gen_2_type_21fa_21fb_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x13_yoga_gen_4_type_21f2_21f3_laptop_thinkpad_bios | >= 0, < 1.22 | cpe:2.3:h:lenovo:x13_yoga_gen_4_type_21f2_21f3_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p16s_gen_2_type_21hk_21hl_laptop_thinkpad_bios | >= 0, < 1.51 | cpe:2.3:h:lenovo:p16s_gen_2_type_21hk_21hl_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | e14_gen_5_type_21jr_21js_laptop_thinkpad_bios | >= 0, < 1.29 | cpe:2.3:h:lenovo:e14_gen_5_type_21jr_21js_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t14s_gen_4_type_21f6_21f7_laptop_thinkpad_bios | >= 0, < 1.23 | cpe:2.3:h:lenovo:t14s_gen_4_type_21f6_21f7_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | thinkpad_r14_gen_5_type_21jm_prc_bios | >= 0, < 1.41 | cpe:2.3:h:lenovo:thinkpad_r14_gen_5_type_21jm_prc_bios:*:*:*:*:*:*:*:* |
| lenovo | l14_gen_4_type_21h1_21h2_laptop_thinkpad_bios | >= 0, < 1.34 | cpe:2.3:h:lenovo:l14_gen_4_type_21h1_21h2_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l13_gen_4_type_21fg_21fh_laptop_thinkpad_bios | >= 0, < 1.24 | cpe:2.3:h:lenovo:l13_gen_4_type_21fg_21fh_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_nano_gen_3_type_21k1_21k2_laptop_thinkpad_bios | >= 0, < 1.28 | cpe:2.3:h:lenovo:x1_nano_gen_3_type_21k1_21k2_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | s2_yoga_gen_8_types_21fu_china_only_laptop_thinkpad_bios | >= 0, < 1.28 | cpe:2.3:h:lenovo:s2_yoga_gen_8_types_21fu_china_only_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l15_gen_4_type_21h7_21h8_laptops_thinkpad_bios | >= 0, < 1.27 | cpe:2.3:h:lenovo:l15_gen_4_type_21h7_21h8_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_yoga_8th_gen_type_21hq_21hr_laptop_thinkpad_bios | >= 0, < 1.37 | cpe:2.3:h:lenovo:x1_yoga_8th_gen_type_21hq_21hr_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t14s_gen_6_type_21m1_21m2_laptops_thinkpad_bios | >= 0, < 1.62_1.12 | cpe:2.3:h:lenovo:t14s_gen_6_type_21m1_21m2_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p15v_gen_3_type_21en_21em_laptop_thinkpad_bios | >= 0, <= 1.28 | cpe:2.3:h:lenovo:p15v_gen_3_type_21en_21em_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p16_gen_1_type_21d6_21d7_laptop_thinkpad_bios | >= 0, < 1.69 | cpe:2.3:h:lenovo:p16_gen_1_type_21d6_21d7_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_2-in-1_gen_10_type_21nu_21nv_laptop_thinkpad_bios | >= 0, < 1.39 | cpe:2.3:h:lenovo:x1_2-in-1_gen_10_type_21nu_21nv_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x9-15_gen_1_type_21q6_21q7_laptop_thinkpad_bios | >= 0, < 1.17 | cpe:2.3:h:lenovo:x9-15_gen_1_type_21q6_21q7_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x9-14_gen_1_type_21qa_21qb_laptop_thinkpad_bios | >= 0, < 1.21 | cpe:2.3:h:lenovo:x9-14_gen_1_type_21qa_21qb_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t14s_gen_5_type_21ls_21lt_laptop_thinkpad_bios | >= 0, < 1.14 | cpe:2.3:h:lenovo:t14s_gen_5_type_21ls_21lt_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l14_gen_5_type_21l1_21l2_laptops_thinkpad_bios | >= 0, < 1.24 | cpe:2.3:h:lenovo:l14_gen_5_type_21l1_21l2_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | e14_gen_6_type_21m3_21m4_laptops_thinkpad_bios | >= 0, < 1.27 | cpe:2.3:h:lenovo:e14_gen_6_type_21m3_21m4_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | e16_gen_3_type_21sr_21ss_laptops_thinkpad_bios | >= 0, < 1.11 | cpe:2.3:h:lenovo:e16_gen_3_type_21sr_21ss_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t14_gen_3_type_21ah_21aj_laptop_thinkpad_bios | >= 0, < 1.45_1.25 | cpe:2.3:h:lenovo:t14_gen_3_type_21ah_21aj_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t15p_gen_3_type_21da_21db_laptop_thinkpad_bios | >= 0, < 1.67 | cpe:2.3:h:lenovo:t15p_gen_3_type_21da_21db_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p1_gen_5_type_21dc_21dd_laptop_thinkpad_bios | >= 0, < 1.29 | cpe:2.3:h:lenovo:p1_gen_5_type_21dc_21dd_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t14s_gen_3_type_21cq_21cr_laptop_thinkpad_bios | >= 0, < 1.51 | cpe:2.3:h:lenovo:t14s_gen_3_type_21cq_21cr_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p14s_gen_3_type_21j5_21j6_laptop_thinkpad_bios | >= 0, < 1.63 | cpe:2.3:h:lenovo:p14s_gen_3_type_21j5_21j6_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | z16_gen_1_type_21d4_21d5_laptop_thinkpad_bios | >= 0, < 1.76 | cpe:2.3:h:lenovo:z16_gen_1_type_21d4_21d5_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t14s_gen_3_type_21br_21bs_laptop_thinkpad_bios | >= 0, < 1.48 | cpe:2.3:h:lenovo:t14s_gen_3_type_21br_21bs_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l14_gen_3_type_21c1_21c2_laptops_thinkpad_bios | >= 0, < 1.44 | cpe:2.3:h:lenovo:l14_gen_3_type_21c1_21c2_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x13_yoga_gen_3_type_21aw_21ax_laptop_thinkpad_bios | >= 0, < 1.25 | cpe:2.3:h:lenovo:x13_yoga_gen_3_type_21aw_21ax_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l13_yoga_gen_3_type_21b5_21b6_laptop_thinkpad_bios | >= 0, < 1.31 | cpe:2.3:h:lenovo:l13_yoga_gen_3_type_21b5_21b6_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | e14_gen_4_type_21e3_21e4_laptops_thinkpad_bios | >= 0, < 1.34 | cpe:2.3:h:lenovo:e14_gen_4_type_21e3_21e4_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_nano_gen_2_type_21e8_21e9_laptop_thinkpad_bios | >= 0, < 1.32 | cpe:2.3:h:lenovo:x1_nano_gen_2_type_21e8_21e9_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | e15_gen_4_type_21ed_21ee_laptop_thinkpad_bios | >= 0, < 1.27 | cpe:2.3:h:lenovo:e15_gen_4_type_21ed_21ee_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | thinkpad_s2_gen_7_type_21bd_bios | >= 0, <= 1.36 | cpe:2.3:h:lenovo:thinkpad_s2_gen_7_type_21bd_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_yoga_7th_gen_type_21cd_21ce_laptop_thinkpad_bios | >= 0, < 1.52 | cpe:2.3:h:lenovo:x1_yoga_7th_gen_type_21cd_21ce_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l14_gen_3_type_21c5_21c6_laptops_thinkpad_bios | >= 0, < 1.36 | cpe:2.3:h:lenovo:l14_gen_3_type_21c5_21c6_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | thinkpad_s2_yoga_gen_6_type_20vn_china_only_bios | >= 0, < 1.38_1.36 | cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_6_type_20vn_china_only_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_yoga_6th_gen_type_20xy_20y0_laptop_thinkpad_bios | >= 0, < 1.75 | cpe:2.3:h:lenovo:x1_yoga_6th_gen_type_20xy_20y0_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | e15_gen_3_type_20yg_20yh_20yj_20yk_laptop_thinkpad_bios | >= 0, < 1.24 | cpe:2.3:h:lenovo:e15_gen_3_type_20yg_20yh_20yj_20yk_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x13_yoga_gen_2_type_20w8_20w9_laptop_thinkpad_bios | >= 0, < 1.51 | cpe:2.3:h:lenovo:x13_yoga_gen_2_type_20w8_20w9_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x13_gen_2_type_20wk_20wl_laptop_thinkpad_bios | >= 0, < 1.64 | cpe:2.3:h:lenovo:x13_gen_2_type_20wk_20wl_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l14_gen_2_type_20x5_20x6_laptop_thinkpad_bios | >= 0, < 1.36 | cpe:2.3:h:lenovo:l14_gen_2_type_20x5_20x6_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t15g_gen_1_type_20ur_20us_laptop_thinkpad_bios | >= 0, < 1.97 | cpe:2.3:h:lenovo:t15g_gen_1_type_20ur_20us_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x13_gen_2_type_20xh_20xj_laptop_thinkpad_bios | >= 0, < 1.36 | cpe:2.3:h:lenovo:x13_gen_2_type_20xh_20xj_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t15p_gen_2_type_21a7_21a8_laptop_thinkpad_bios | >= 0, < 1.83 | cpe:2.3:h:lenovo:t15p_gen_2_type_21a7_21a8_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p14s_gen_2_type_21a0_21a1_laptop_thinkpad_bios | >= 0, < 1.33 | cpe:2.3:h:lenovo:p14s_gen_2_type_21a0_21a1_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | thinkpad_s2_yoga_gen_6_type_21ag_china_only_bios | >= 0, <= 1.38 | cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_6_type_21ag_china_only_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_extreme_4th_gen_type_20y5_20y6_laptop_thinkpad_bios | >= 0, < 1.33 | cpe:2.3:h:lenovo:x1_extreme_4th_gen_type_20y5_20y6_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | p17_gen_2_type_20yu_20yv_laptops_thinkpad_bios | >= 0, < 1.97 | cpe:2.3:h:lenovo:p17_gen_2_type_20yu_20yv_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_titanium_type_20qa_20qb_laptop_thinkpad_bios | >= 0, < 1.37 | cpe:2.3:h:lenovo:x1_titanium_type_20qa_20qb_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x1_nano_gen_1_type_20un_20uq_laptop_thinkpad_bios | >= 0, < 1.68 | cpe:2.3:h:lenovo:x1_nano_gen_1_type_20un_20uq_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x12_detachable_gen_1_type_20uw_20uv_laptop_thinkpad_bios | >= 0, <= 1.40 | cpe:2.3:h:lenovo:x12_detachable_gen_1_type_20uw_20uv_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | e16_gen_2_type_21ma_21mb_laptops_thinkpad_bios | >= 0, < 1.21 | cpe:2.3:h:lenovo:e16_gen_2_type_21ma_21mb_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | x13_gen_5_type_21lu_21lv_laptop_thinkpad_bios | >= 0, < 1.17 | cpe:2.3:h:lenovo:x13_gen_5_type_21lu_21lv_laptop_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | l14_gen_2_type_20x1_20x2_laptops_thinkpad_bios | >= 0, < 1.73 | cpe:2.3:h:lenovo:l14_gen_2_type_20x1_20x2_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | e16_gen_3_type_21st_21su_laptops_thinkpad_bios | >= 0, < 1.21 | cpe:2.3:h:lenovo:e16_gen_3_type_21st_21su_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |
| lenovo | t16_gen_4_type_21qe_21qf_laptops_thinkpad_bios | >= 0, < 1.10 | cpe:2.3:h:lenovo:t16_gen_4_type_21qe_21qf_laptops_thinkpad_bios:*:*:*:*:*:*:*:* |