Skip to main content
Threat Radar animated logo
EPSS 0.1%top 98%

CVE-2025-10238: CWE-787: Out-of-bounds Write in Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS

0
High
VulnerabilityCVE-2025-10238cvecve-2025-10238cwe-787
Published: 06/10/2026 (06/10/2026, 14:11:21 UTC)
Source: CVE Database V5
Vendor/Project: Lenovo
Product: X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS

Description

During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).

CVSS v4.0

Score 8.4high

Attack Vector
Local
Attack Complexity
Low
Attack Requirements
None
Privileges Required
High
User Interaction
None
Vuln. Confidentiality
High
Vuln. Integrity
High
Vuln. Availability
High
Subsq. Confidentiality
None
Subsq. Integrity
None
Subsq. Availability
None
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected software

Lenovo

X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.12

Lenovo

X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.15

Lenovo

P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS

Affected versions
=0

Lenovo

L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.40

Lenovo

T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.11

Lenovo

P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS

Affected versions
=0

Lenovo

L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.15

Lenovo

L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.14

Lenovo

E16 Gen 3 (Type 22AY, 22B0) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.38

Lenovo

L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.13

Lenovo

X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS

Affected versions
=0

Lenovo

T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.10

Lenovo

X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.45

Lenovo

X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.25

Lenovo

Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.37

Lenovo

P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS

Affected versions
=0

Lenovo

X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.37

Lenovo

T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.28

Lenovo

P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.47

Lenovo

P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.38

Lenovo

P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS

Affected versions
=0

Lenovo

P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS

Affected versions
=0

Lenovo

X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.22

Lenovo

P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.51

Lenovo

E14 Gen 5 (Type 21JR, 21JS) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.29

Lenovo

T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.23

Lenovo

ThinkPad R14 Gen 5 Type 21JM PRC BIOS

Affected versions
>=0 <1.41

Lenovo

L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.34

Lenovo

L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.24

Lenovo

X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.28

Lenovo

S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.28

Lenovo

L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.27

Lenovo

X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.37

Lenovo

T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS

Affected versions
=0

Lenovo

P15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOS

Affected versions
>=0 <=1.28

Lenovo

P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.69

Lenovo

X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.39

Lenovo

X9-15 Gen 1 (Type 21Q6, 21Q7) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.17

Lenovo

X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.21

Lenovo

T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.14

Lenovo

L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.24

Lenovo

E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.27

Lenovo

E16 Gen 3 (Type 21SR, 21SS) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.11

Lenovo

T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS

Affected versions
=0

Lenovo

T15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.67

Lenovo

P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.29

Lenovo

T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.51

Lenovo

P14s Gen 3 (Type 21J5, 21J6) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.63

Lenovo

Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.76

Lenovo

T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.48

Lenovo

L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.44

Lenovo

X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.25

Lenovo

L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.31

Lenovo

E14 Gen 4 (type 21E3, 21E4) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.34

Lenovo

X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.32

Lenovo

E15 Gen 4 (type 21ED 21EE) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.27

Lenovo

ThinkPad S2 Gen 7 Type 21BD BIOS

Affected versions
>=0 <=1.36

Lenovo

X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.52

Lenovo

L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.36

Lenovo

ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS

Affected versions
=0

Lenovo

X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.75

Lenovo

E15 Gen 3 (Type 20YG, 20YH, 20YJ, 20YK) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.24

Lenovo

X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.51

Lenovo

X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.64

Lenovo

L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.36

Lenovo

T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.97

Lenovo

X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.36

Lenovo

T15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.83

Lenovo

P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.33

Lenovo

ThinkPad S2 Yoga Gen 6 Type 21AG China Only BIOS

Affected versions
>=0 <=1.38

Lenovo

X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.33

Lenovo

P17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.97

Lenovo

X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.37

Lenovo

X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.68

Lenovo

X12 Detachable Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOS

Affected versions
>=0 <=1.40

Lenovo

E16 Gen 2 (Type 21MA, 21MB) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.21

Lenovo

X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.17

Lenovo

L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.73

Lenovo

E16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.21

Lenovo

T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.10

Lenovo

T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.08

Lenovo

T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS

Affected versions
=0

Lenovo

X1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.34

Lenovo

X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.37

Lenovo

T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.37

Lenovo

T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.34

Lenovo

X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.57

Lenovo

X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.41

Lenovo

X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS

Affected versions
>=0 <2.05

Lenovo

X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS

Affected versions
=0

Lenovo

X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS

Affected versions
=0

Lenovo

P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS

Affected versions
>=0 <2.01

Lenovo

T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS

Affected versions
=0

Lenovo

X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.55

Lenovo

L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.53

Lenovo

L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.45

Lenovo

L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.21

Lenovo

E14 Gen 7 (Type 21T9, 21TA) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.11

Lenovo

P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.17

Lenovo

L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.10

Lenovo

L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.06

Lenovo

T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.14

Lenovo

P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS

Affected versions
>=0 <1.17

Lenovo

P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.26

Lenovo

T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.18

Lenovo

X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.21

Lenovo

T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.16

Lenovo

P16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOS

Affected versions
>=0 <1.18

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 06/17/2026, 16:00:16 UTC

Technical Analysis

CVE-2025-10238 is an out-of-bounds write vulnerability in the BIOS of Lenovo ThinkPad X13 Gen 6 (Type 21RK, 21RL) laptops. The vulnerability allows a privileged local user to execute arbitrary code in System Management Mode (SMM), a highly privileged execution environment. This could lead to significant security risks due to the elevated privileges of SMM. The vulnerability was identified during an internal security assessment. There is currently no official fix or patch available, and no known exploits in the wild have been reported.

Potential Impact

A privileged local user could exploit this vulnerability to execute arbitrary code within System Management Mode (SMM), potentially compromising the system at a very high privilege level. This could allow bypassing of security controls and persistent compromise of the affected device's firmware environment.

Mitigation Recommendations

Patch status is not yet confirmed — check the Lenovo vendor advisory for current remediation guidance. Until an official fix is released, restrict local privileged access to trusted users only and monitor for unusual activity related to BIOS or firmware modifications.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.2
Assigner Short Name
lenovo
Date Reserved
2025-09-10T15:30:05.055Z
Cvss Version
4.0
State
PUBLISHED

Threat ID: 6a29799fc9170919df2daec5

Added to database: 06/10/2026, 14:50:07 UTC

Last enriched: 06/17/2026, 16:00:16 UTC

Last updated: 09/12/2026, 10:01:26 UTC

Views: 89

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses