CVE-2025-10238: Lenovo e14 Gen 4 Type 21e3, 21e4 Laptops Thinkpad BIOS

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).

Affected products

• Lenovo e14 Gen 4 Type 21e3, 21e4 Laptops Thinkpad BIOS: before 1.34 (fixed in 1.34)
• Lenovo e14 Gen 5 Type 21jr, 21js Laptop Thinkpad BIOS: before 1.29 (fixed in 1.29)
• Lenovo e14 Gen 6 Type 21m3, 21m4 Laptops Thinkpad BIOS: before 1.27 (fixed in 1.27)
• Lenovo e14 Gen 7 Type 21t9, 21ta Laptops Thinkpad BIOS: before 1.11 (fixed in 1.11)
• Lenovo e15 Gen 3 Type 20yg, 20yh, 20yj, 20yk Laptop Thinkpad BIOS: before 1.24 (fixed in 1.24)
• Lenovo e15 Gen 4 Type 21ed 21ee Laptop Thinkpad BIOS: before 1.27 (fixed in 1.27)
• Lenovo e16 Gen 2 Type 21ma, 21mb Laptops Thinkpad BIOS: before 1.21 (fixed in 1.21)
• Lenovo e16 Gen 3 Type 21sr, 21ss Laptops Thinkpad BIOS: before 1.11 (fixed in 1.11)
• Lenovo e16 Gen 3 Type 21st, 21su Laptops Thinkpad BIOS: before 1.21 (fixed in 1.21)
• Lenovo e16 Gen 3 Type 22ay, 22b0 Laptop Thinkpad BIOS: before 1.38 (fixed in 1.38)
• Lenovo l13 2-In-1 Gen 6 Type 21r7, 21r8 Laptops Thinkpad BIOS: before 1.10 (fixed in 1.10)
• Lenovo l13 Gen 4 Type 21fg, 21fh Laptop Thinkpad BIOS: before 1.24 (fixed in 1.24)
• Lenovo l13 Gen 5 Type 21lb, 21lc Laptops Thinkpad BIOS: before 1.21 (fixed in 1.21)
• Lenovo l13 Gen 6 Type 21rb, 21rc Laptops Thinkpad BIOS: before 1.15 (fixed in 1.15)
• Lenovo l13 Type 20r3, 20r4 Laptops Thinkpad BIOS: before 1.45 (fixed in 1.45)
• Lenovo l13 Yoga Gen 3 Type 21b5, 21b6 Laptop Thinkpad BIOS: before 1.31 (fixed in 1.31)
• Lenovo l14 Gen 2 Type 20x1 20x2 Laptops Thinkpad BIOS: before 1.73 (fixed in 1.73)
• Lenovo l14 Gen 2 Type 20x5, 20x6 Laptop Thinkpad BIOS: before 1.36 (fixed in 1.36)
• Lenovo l14 Gen 3 Type 21c1, 21c2 Laptops Thinkpad BIOS: before 1.44 (fixed in 1.44)
• Lenovo l14 Gen 3 Type 21c5, 21c6 Laptops Thinkpad BIOS: before 1.36 (fixed in 1.36)
• Lenovo l14 Gen 4 Type 21h1, 21h2 Laptop Thinkpad BIOS: before 1.34 (fixed in 1.34)
• Lenovo l14 Gen 5 Type 21l1, 21l2 Laptops Thinkpad BIOS: before 1.24 (fixed in 1.24)
• Lenovo l14 Gen 6 Type 21s6, 21s7 Laptops Thinkpad BIOS: before 1.06 (fixed in 1.06)
• Lenovo l14 Gen 6 Type 21se, 21sf Laptops Thinkpad BIOS: before 1.14 (fixed in 1.14)
• Lenovo l15 Gen 4 Type 21h7, 21h8 Laptops Thinkpad BIOS: before 1.27 (fixed in 1.27)
• and 83 more

Published 2026-06-10. Last modified 2026-10-07.