CVE-2025-10238
During an internal security assessment, a potential out-of-bounds write vulnerability was...
8.4 High
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.12%Up 0.1 points since Jun 11, 2026
What each source reports
CVE List Score used
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).
- Record
CVE-2025-10238- CVSS 4.0
- 8.4 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2025-210108
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).
- Record
EUVD-2025-210108- CVSS 4.0
- 8.4 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-p7jf-pwjp-h977
During an internal security assessment, a potential out-of-bounds write vulnerability was...
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).
- Record
GHSA-p7jf-pwjp-h977- CVSS 4.0
- 8.4 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).
- Record
CVE-2025-10238- CVSS 4.0
- 8.4 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
- lenovo e14 gen 4 (type 21e3, 21e4) laptops (thinkpad) bios
- lenovo e14 gen 5 (type 21jr, 21js) laptop (thinkpad) bios
- lenovo e14 gen 6 (type 21m3, 21m4) laptops (thinkpad) bios
- lenovo e14 gen 7 (type 21t9, 21ta) laptops (thinkpad) bios
- lenovo e15 gen 3 (type 20yg, 20yh, 20yj, 20yk) laptop (thinkpad) bios
- lenovo e15 gen 4 (type 21ed 21ee) laptop (thinkpad) bios
- lenovo e16 gen 2 (type 21ma, 21mb) laptops (thinkpad) bios
- lenovo e16 gen 3 (type 21sr, 21ss) laptops (thinkpad) bios
- lenovo e16 gen 3 (type 21st, 21su) laptops (thinkpad) bios
- lenovo e16 gen 3 (type 22ay, 22b0) laptop (thinkpad) bios
- lenovo l13 (type 20r3, 20r4) laptops (thinkpad) bios
- lenovo l13 2-in-1 gen 6 (type 21r7, 21r8) laptops (thinkpad) bios
Show 96 moreShow less
- lenovo l13 gen 4 (type 21fg, 21fh) laptop (thinkpad) bios
- lenovo l13 gen 5 (type 21lb, 21lc) laptops (thinkpad) bios
- lenovo l13 gen 6 (type 21rb, 21rc) laptops (thinkpad) bios
- lenovo l13 yoga gen 3 (type 21b5, 21b6) laptop (thinkpad) bios
- lenovo l14 gen 2 (type 20x5, 20x6) laptop (thinkpad) bios
- lenovo l14 gen 2 type 20x1 20x2 laptops (thinkpad) bios
- lenovo l14 gen 3 (type 21c1, 21c2) laptops (thinkpad) bios
- lenovo l14 gen 3 (type 21c5, 21c6) laptops (thinkpad) bios
- lenovo l14 gen 4 (type 21h1, 21h2) laptop (thinkpad) bios
- lenovo l14 gen 5 (type 21l1, 21l2) laptops (thinkpad) bios
- lenovo l14 gen 6 (type 21s6, 21s7) laptops (thinkpad) bios
- lenovo l14 gen 6 (type 21se, 21sf) laptops (thinkpad) bios
- lenovo l15 gen 4 (type 21h7, 21h8) laptops (thinkpad) bios
- lenovo l16 gen 1 (type 21l7 21l8) laptops (thinkpad) bios
- lenovo l16 gen 2 (type 21sc, 21sd) laptops (thinkpad) bios
- lenovo l390 (type 20nr, 20ns) laptops (thinkpad) bios
- lenovo p1 gen 5 (type 21dc 21dd) laptop (thinkpad) bios
- lenovo p1 gen 6 (type 21fv, 21fw) laptop (thinkpad) bios
- lenovo p1 gen 7 (type 21kv, 21kw) laptop (thinkpad) bios
- lenovo p14s gen 2 (type 21a0, 21a1) laptop (thinkpad) bios
- lenovo p14s gen 3 (type 21j5, 21j6) laptop (thinkpad) bios
- lenovo p14s gen 4 (type 21k5, 21k6) laptop (thinkpad) bios
- lenovo p14s gen 5 (type 21g2, 21g3) laptops (thinkpad) bios
- lenovo p14s gen 6 (type 21ql, 21qm) laptops (thinkpad) bios
- lenovo p14s gen 6 (type 21qt, 21qu) laptops (thinkpad) bios
- lenovo p15v gen 3 (type 21en 21em) laptop (thinkpad) bios
- lenovo p16 gen 1 (type 21d6, 21d7) laptop (thinkpad) bios
- lenovo p16 gen 2 (type 21fa, 21fb) laptop (thinkpad) bios
- lenovo p16s gen 2 (type 21hk, 21hl) laptop (thinkpad) bios
- lenovo p16v gen 1 (type 21fc, 21fd) laptop (thinkpad) bios
- lenovo p16v gen 1 (type 21fe, 21ff) laptop (thinkpad) bios
- lenovo p16v gen 2 (type 21kx, 21ky) laptops (thinkpad) bios
- lenovo p16v gen 3 (type 21rs, 21rt) laptop (thinkpad) bios
- lenovo p17 gen 2 (type 20yu, 20yv) laptops (thinkpad) bios
- lenovo p73 (type 20qr, 20qs) laptop (thinkpad) bios
- lenovo s2 yoga gen 8 (types 21fu) china only laptop (thinkpad) bios
- lenovo t14 gen 3 (type 21ah, 21aj) laptop (thinkpad) bios
- lenovo t14 gen 5 (type 21mc, 21md) laptops (thinkpad) bios
- lenovo t14s (type 20t0, 20t1) laptop (thinkpad) bios
- lenovo t14s gen 3 (type 21br 21bs) laptop (thinkpad) bios
- lenovo t14s gen 3 (type 21cq 21cr) laptop (thinkpad) bios
- lenovo t14s gen 4 (type 21f6, 21f7) laptop (thinkpad) bios
- lenovo t14s gen 4 (type 21f8, 21f9) laptop (thinkpad) bios
- lenovo t14s gen 5 (type 21ls, 21lt) laptop (thinkpad) bios
- lenovo t14s gen 6 (type 21m1, 21m2) laptops (thinkpad) bios
- lenovo t14s gen 6 (type 21qx, 21qy) laptops (thinkpad) bios
- lenovo t14s gen 6 (type 21r1, 21r2) laptops (thinkpad) bios
- lenovo t14s gen 6 (type 21tb, 21tc) laptops (thinkpad) bios
- lenovo t15 (type 20s6, 20s7) laptop (thinkpad) bios
- lenovo t15 gen 2 (type 20w4, 20w5) laptop (thinkpad) bios
- lenovo t15g gen 1 (type 20ur 20us) laptop (thinkpad) bios
- lenovo t15p gen 2 (type 21a7, 21a8) laptop (thinkpad) bios
- lenovo t15p gen 3 (type 21da 21db) laptop (thinkpad) bios
- lenovo t16 gen 3 (type 21mn, 21mq) laptops (thinkpad) bios
- lenovo t16 gen 4 (type 21qe, 21qf) laptops (thinkpad) bios
- lenovo t16 gen 4 (type 22aw, 22ax) laptops (thinkpad) bios
- lenovo t490 (type 20n2, 20n3) laptop (thinkpad) bios
- lenovo thinkpad r14 gen 5 type 21jm prc bios
- lenovo thinkpad s2 gen 7 type 21bd bios
- lenovo thinkpad s2 yoga gen 6 type 21ag china only bios
- lenovo thinkpad s2 yoga gen 6 type 20vn china only bios
- lenovo x1 2-in-1 gen 10 (type 21nu, 21nv) laptop (thinkpad) bios
- lenovo x1 2-in-1 gen 9 (type 21ke, 21kf) laptop (thinkpad) bios
- lenovo x1 carbon 13th gen (type 21nx, 21ny) laptops (thinkpad) bios
- lenovo x1 extreme 2nd gen (type 20qv, 20qw) laptop (thinkpad) bios
- lenovo x1 extreme 3rd gen (type 20tk, 20tl) laptop (thinkpad) bios
- lenovo x1 extreme 4th gen (type 20y5, 20y6) laptop (thinkpad) bios
- lenovo x1 fold 16 gen 1 (type 21es, 21et) laptop (thinkpad) bios
- lenovo x1 fold gen 1 (type 20rk, 20rl) laptop (thinkpad) bios
- lenovo x1 nano gen 1 (type 20un 20uq) laptop (thinkpad) bios
- lenovo x1 nano gen 2 (type 21e8 21e9) laptop (thinkpad) bios
- lenovo x1 nano gen 3 (type 21k1, 21k2) laptop (thinkpad) bios
- lenovo x1 titanium (type 20qa, 20qb) laptop (thinkpad) bios
- lenovo x1 yoga 4th gen (type 20sa, 20sb) laptop (thinkpad) bios
- lenovo x1 yoga 5th gen (type 20ub, 20uc) laptop (thinkpad) bios
- lenovo x1 yoga 6th gen (type 20xy, 20y0) laptop (thinkpad) bios
- lenovo x1 yoga 7th gen (type 21cd, 21ce) laptop (thinkpad) bios
- lenovo x1 yoga 8th gen (type 21hq, 21hr) laptop (thinkpad) bios
- lenovo x12 detachable gen 1 (type 20uw, 20uv) laptop (thinkpad) bios
- lenovo x12 detachable gen 2 (type 21lk, 21ll) laptops (thinkpad) bios
- lenovo x13 gen 2 (type 20wk, 20wl) laptop (thinkpad) bios
- lenovo x13 gen 2 (type 20xh, 20xj) laptop (thinkpad) bios
- lenovo x13 gen 4 (type 21j3, 21j4) laptop (thinkpad) bios
- lenovo x13 gen 5 (type 21lu, 21lv) laptop (thinkpad) bios
- lenovo x13 gen 6 (type 21rk, 21rl) laptops (thinkpad) bios
- lenovo x13 gen 6 (type 21rm, 21rn) laptops (thinkpad) bios
- lenovo x13 yoga gen 1 (type 20sx, 20sy) laptop (thinkpad) bios
- lenovo x13 yoga gen 2 (type 20w8, 20w9) laptop (thinkpad) bios
- lenovo x13 yoga gen 3 (type 21aw 21ax) laptop (thinkpad) bios
- lenovo x13 yoga gen 4 (type 21f2, 21f3) laptop (thinkpad) bios
- lenovo x390 (type 20sc, 20sd) laptop (thinkpad) bios
- lenovo x390 yoga (type 20nn, 20nq) laptop (thinkpad) bios
- lenovo x9-14 gen 1 (type 21qa, 21qb) laptop (thinkpad) bios
- lenovo x9-15 gen 1 (type 21q6, 21q7) laptop (thinkpad) bios
- lenovo z16 gen 1 (type 21d4, 21d5) laptop (thinkpad) bios
- lenovo z16 gen 2 (type 21jx, 21jy) laptop (thinkpad) bios
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-10238 is a high vulnerability (CVSS 8.4) in Lenovo E14 Gen 4 (type 21e3, 21e4) Laptops (thinkpad) Bios, published June 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 1st percentile. No source names a fixed version.