← Database

CVE-2022-1108

MEDIUM CVSS: 6.7 Published: 2022-04-22 Modified: 2026-06-17

Description

A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.

Affected Platforms

Lenovo Thinkpad X1 Fold Gen 1Lenovo Thinkpad X1 Fold Gen 1 Firmware

Weakness Type

CWE-20, CWE-20, CWE-269

References