CVE-2022-1108: Lenovo Thinkpad x1 Fold Gen 1 Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

• Lenovo Thinkpad x1 Fold Gen 1 Firmware: before n2pet50w (fixed in n2pet50w)

Published 2022-04-22. Last modified 2026-06-17.