Medium severity6.7NVD Advisory· Published Apr 22, 2022· Updated Jun 17, 2026
CVE-2022-1108
CVE-2022-1108
Description
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
3- cpe:2.3:o:lenovo:thinkpad_x1_fold_gen_1_firmware:*:*:*:*:*:*:*:*Range: <n2pet50w
- Range: various
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/product_security/LEN-84943nvdVendor Advisory
News mentions
0No linked articles in our index yet.