{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2025-10238 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2025-10238 yet. Limit exposure of the affected software until one is available.","what":"CVE-2025-10238 is a high-severity memory corruption vulnerability in Lenovo E14 Gen 4 (type 21E3, 21E4) Laptops (ThinkPad) BIOS, published on 10 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2025-10238 and fix it if it is affected.\n\nWhat it is: CVE-2025-10238 is a high-severity memory corruption vulnerability in Lenovo E14 Gen 4 (type 21E3, 21E4) Laptops (ThinkPad) BIOS, published on 10 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2025-10238 in the wild and no public exploit code.\n\nAffected product: Lenovo E14 Gen 4 (type 21E3, 21E4) Laptops (ThinkPad) BIOS. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2025-10238/ (Markdown: https://insights.sbomify.com/CVE-2025-10238/index.md)","id":"CVE-2025-10238","markdown":"https://insights.sbomify.com/CVE-2025-10238/index.md","name":"CVE-2025-10238","record":{"aliases":["GHSA-p7jf-pwjp-h977"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["code_execution","privilege_escalation"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"ThinkPad BIOS","requires_auth":"high_privilege","summary":"A privileged local user can execute code in System Management Mode via an out-of-bounds write in Lenovo ThinkPad BIOS.","user_interaction":"not_required","vuln_class":"memory_corruption"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"lenovo","cpe":[],"cvss":{"score":8.4,"severity":"high","source":"cna","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},"cwes":[{"id":"CWE-787","name":"Out-of-bounds Write"}],"description":"During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Memory corruption in E14 Gen 4 (type 21E3, 21E4) Laptops (ThinkPad) BIOS","id":"CVE-2025-10238","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"memory_corruption","year":"2025"},"n_packages":0,"n_references":1,"next":{"headline":"Unintended command execution via troubleshooting scripts in Progress Flowmon","id":"CVE-2025-10239"},"packages":[],"prev":{"headline":"Privilege escalation in L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS","id":"CVE-2025-10237"},"products":["E14 Gen 4 (type 21E3, 21E4) Laptops (ThinkPad) BIOS","E14 Gen 5 (Type 21JR, 21JS) Laptop (ThinkPad) BIOS","E14 Gen 6 (Type 21M3, 21M4) Laptops (ThinkPad) BIOS","E14 Gen 7 (Type 21T9, 21TA) Laptops (ThinkPad) BIOS","E15 Gen 3 (Type 20YG, 20YH, 20YJ, 20YK) Laptop (ThinkPad) BIOS","E15 Gen 4 (type 21ED 21EE) Laptop (ThinkPad) BIOS","E16 Gen 2 (Type 21MA, 21MB) Laptops (ThinkPad) BIOS","E16 Gen 3 (Type 21SR, 21SS) Laptops (ThinkPad) BIOS","E16 Gen 3 (Type 21ST, 21SU) Laptops (ThinkPad) BIOS","E16 Gen 3 (Type 22AY, 22B0) Laptop (ThinkPad) BIOS","L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS","L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS","L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS","L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS","L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS","L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS","L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS","L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS","L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS","L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS","L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS","L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS","L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS","L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS","L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS","L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS","L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS","L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS","P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS","P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS","P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS","P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS","P14s Gen 3 (Type 21J5, 21J6) Laptop (ThinkPad) BIOS","P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS","P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS","P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS","P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS","P15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOS","P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOS","P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS","P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS","P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS","P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS","P16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOS","P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS","P17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOS","P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS","S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS","T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS","T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS","T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS","T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS","T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS","T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS","T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS","T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS","T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS","T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS","T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS","T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS","T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS","T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS","T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS","T15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOS","T15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOS","T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS","T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS","T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS","T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS","ThinkPad R14 Gen 5 Type 21JM PRC BIOS","ThinkPad S2 Gen 7 Type 21BD BIOS","ThinkPad S2 Yoga Gen 6  Type 21AG China Only BIOS","ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS","X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS","X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS","X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS","X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS","X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS","X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS","X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS","X1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOS","X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS","X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS","X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS","X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS","X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS","X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS","X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS","X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS","X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS","X12 Detachable  Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOS","X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS","X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS","X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS","X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS","X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS","X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS","X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS","X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS","X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS","X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS","X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS","X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS","X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS","X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS","X9-15 Gen 1 (Type 21Q6, 21Q7) Laptop (ThinkPad) BIOS","Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS","Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS"],"published":"2026-06-10","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"total"},"state":"PUBLISHED","updated":"2026-06-11","vendors":["Lenovo"]},"summary":"A privileged local user can execute code in System Management Mode via an out-of-bounds write in Lenovo ThinkPad BIOS.","url":"https://insights.sbomify.com/CVE-2025-10238/"}