← Database
CVE-2021-3970
MEDIUM
CVSS: 6.7
Published: 2022-04-22
Modified: 2026-06-17
Description
A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected Platforms
Lenovo Legion 5-17Ach6HLenovo Legion Y540-15Irh FirmwareLenovo L340-17IwlLenovo Yoga Slim 7 Pro-14Ach5 DLenovo Yoga 7-14Acn6 FirmwareLenovo V14-IglLenovo Yoga Slim 7 Pro-14Arh5 FirmwareLenovo Legion 5-17Ach6 FirmwareLenovo V15-IilLenovo Ideapad 5-15Iil05 Firmware
Weakness Type
CWE-20, CWE-20