Security Advisory
CVE-2025-10238
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).