// vendor
Published CVEs and security advisories coordinated with Lenovo, credited to Eva Crystal (0xiviel), XSource Security.
Out-of-bounds write in System Management Mode enabling code execution at SMM (ring -2) by a local privileged attacker.
Out-of-bounds write in System Management Mode lets a local privileged attacker modify power-management settings. Ring -2, below Secure Boot.
Discloses the address of protected SMM memory to a local privileged attacker, weakening SMRAM protections. Ring -2.
Missing authentication allows WMI commands to trigger SMI handlers arbitrarily, reaching SMM (ring -2) code paths.
