Executive brief
A security vulnerability has been identified in the BIOS firmware of several Lenovo laptop models, including Yoga, Legion, and IdeaPad series. The BIOS is the fundamental software that starts the computer and manages hardware communication. If exploited, a local attacker with high-level administrative privileges could gain control over the most protected area of the system's memory, potentially allowing them to bypass security protections or cause permanent system instability.
Technical details
This vulnerability is classified as an out-of-bounds (OOB) write within the BIOS firmware of multiple Lenovo product lines. The flaw resides in the handling of memory operations, which could be leveraged by a local attacker with high privileges (e.g., administrative or SYSTEM) to write data outside of intended buffers. Successful exploitation allows for arbitrary code execution within System Management Mode (SMM), a highly privileged execution environment in x86 CPUs that operates independently of the operating system. This could lead to the bypass of firmware-level security features like Secure Boot or the installation of persistent firmware implants. Lenovo has released BIOS updates for affected models to mitigate this issue.
Affected products
- Lenovo Yoga Pro 7 15IPH11 BIOS < TNCN37WW
- Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW
- Lenovo Legion 7 16AGP11 BIOS <= TPCN27WW
- Lenovo IdeaPad Pro 5 16AGP11 BIOS <= T8CN19WW
- Lenovo Legion Pro 5 16ADR10 BIOS <= U5CN07WW
- Lenovo Lenovo V15 G6 ARP BIOS <= TYCN15WW
- Lenovo LOQ 15ARP10E BIOS < SUCN18WW
- Lenovo Yoga Book 9 14IAH10 BIOS <= QEME23WW
- Lenovo Legion Pro 7 16AFR10H BIOS < SMCN20WW
- Lenovo Legion Pro 5 16AFR10 BIOS <= RECN14WW
- Lenovo Legion Pro 7 16ADR10H BIOS < SJCN17WW
Timeline
- 2026-07-16: advisory: Initial advisory published by Lenovo and NVD