A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory