← Database
CVE-2021-3786
MEDIUM
CVSS: 4.4
Published: 2021-11-12
Modified: 2026-06-17
Description
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
Affected Platforms
Lenovo Ideapad Yoga S940-14Iwl FirmwareLenovo Thinkpad L490Lenovo Ideapad S940-14IwlLenovo Thinkpad Yoga 370 FirmwareLenovo Thinkpad X1 Yoga 1St Gen FirmwareLenovo Thinkpad X1 Yoga 4Th Gen FirmwareLenovo Thinkpad P1 Gen 2 FirmwareLenovo Thinkpad P71 FirmwareLenovo Thinkpad X13 Gen 1 FirmwareLenovo Thinkpad P51
Weakness Type
CWE-20, NVD-CWE-noinfo