A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.

Summary

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.

Timeline

1. Jul 16, 2026, 4:50 PM UTCCVE published
2. Jul 16, 2026, 5:21 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Jul 16, 2026, 5:31 PM UTCRecord last updated

Affected versions

• Lenovo Yoga Pro 7 15IPH11 BIOS

  fixed in TNCN37WW

• Lenovo IdeaPad Pro 5 16IPH11 BIOS

  fixed in S4CN62WW

• Lenovo Legion 7 16AGP11 BIOS

  through TPCN27WW

• Lenovo IdeaPad Pro 5 16AGP11 BIOS

  through T8CN19WW

• Lenovo Legion Pro 5 16ADR10 BIOS

  through U5CN07WW

• Lenovo Lenovo V15 G6 ARP BIOS

  through TYCN15WW

• Lenovo LOQ 15ARP10E BIOS

  fixed in SUCN18WW

• Lenovo Yoga Book 9 14IAH10 BIOS

  through QEME23WW

• Lenovo Legion Pro 7 16AFR10H BIOS

  fixed in SMCN20WW

• Lenovo Legion Pro 5 16AFR10 BIOS

  through RECN14WW

• Lenovo Legion Pro 7 16ADR10H BIOS

  fixed in SJCN17WW

• Lenovo Lenovo V15 G4 AMN BIOS

  fixed in L1CN72WW

• Lenovo ThinkBook Plus G6 Rollable BIOS

  through QWCN34WW

• Lenovo Legion 5 15IAX10 BIOS

  through S2CN15WW

• Lenovo Legion 5 15AKP10 BIOS

  through RYCN22WW

• Lenovo Legion 5 15IRX10 BIOS

  through QNCN28WW

• Lenovo Legion Pro 5 16IRX10 BIOS

  through S9CN13WW

• Lenovo ThinkBook 16p G6 ADR BIOS

  fixed in R7CN26WW

• Lenovo Legion Pro 5 16ADR10 BIOS

  through RLCN21WW

• Lenovo Legion 5 15AHP10 BIOS

  fixed in RGCN35WW

• Lenovo Legion Pro 7 16IRX9H BIOS

  through N2CN26WW

• Lenovo Legion 9 16IRX9 BIOS

  through NXCN20WW

• Lenovo IdeaPad Slim 3 16IRU9 BIOS

  fixed in P2CN27WW

• Lenovo Legion Pro 5 16IRX9 BIOS

  fixed in N0CN35WW

• Lenovo IdeaPad Pro 5 16IMH9 BIOS

  through MECN68WW

• Lenovo Legion Pro 7 16ARX8H BIOS

  through LPCN45WW

• Lenovo ThinkBook Plus G4 IRU BIOS

  through LUCN47WW

• Lenovo Legion Slim 5 14APH8 BIOS

  through MACN33WW

• Lenovo ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS

  through P8CN42WW

• Lenovo Legion Pro 7 16ARX8H BIOS

  through LPCN59WW

• Lenovo Lenovo V15 G4 IAH BIOS

  fixed in MCCN39WW

• Lenovo Lenovo V15 G5 IRL BIOS

  fixed in PMCN38WW

• Lenovo Yoga Pro 9 14IRP8 BIOS

  through MBCN33WW

• Lenovo IdeaPad Slim 3 16IRH8 BIOS

  fixed in LTCN44WW

• Lenovo IdeaPad Pro 5 16IRH8 BIOS

  through KZCN46WW

• Lenovo IdeaPad Slim 3 15AMN8 BIOS

  fixed in L1CN51WW

• Lenovo Yoga 9 14IRP8 BIOS

  fixed in L4CN31WW

• Lenovo Legion Pro 5 16ARX8 BIOS

  through LPCN59WW

• Lenovo Lenovo S14 G3 IAP BIOS

  through JKCN49WW

• Lenovo IdeaPad 5 15ABA7 BIOS

  fixed in KACN29WW

• Lenovo ThinkBook 16p G5 IRX BIOS

  fixed in P5CN31WW

• Lenovo Lenovo V15 G2 IJL Laptop BIOS

  fixed in HTCN49WW

• Lenovo Yoga Pro 9 16IMH9 BIOS

  through NKCN30WW

• Lenovo ThinkBook 16p G6 IAX BIOS

  fixed in R2CN57WW

• Lenovo Legion 7 16IAX10 BIOS

  through RXCN18WW

• Lenovo Legion Pro 5 16IAX10 BIOS

  through Q6CN26WW

• Lenovo Legion Pro 7 16IAX10H BIOS

  through Q7CN31WW

• Lenovo IdeaPad Slim 3 16IRH10R BIOS

  through QDCN23WW

• Lenovo Legion 5 15IRX9 BIOS

  through PTCN14WW

• Lenovo Lenovo V14 G6 ITN BIOS

  fixed in RHCN20WW

• Lenovo Yoga Book 9 14IAH10 BIOS

  through QECN21WW

• Lenovo IdeaPad Slim 3 14ITN9 BIOS

  fixed in QUCN20WW

• Lenovo IdeaPad Slim 3 16ARP10 BIOS

  fixed in QBCN30WW

• Lenovo IdeaPad Pro 5 16ASP10 BIOS

  through R1CN24WW

• Lenovo Legion 5 15APH9 BIOS

  fixed in PJCN18WW

• Lenovo Yoga 9 2-in-1 14ILL10 BIOS

  through Q9CN22WW

• Lenovo Yoga Book 9 13IMU9 BIOS

  through NVCN24WW

• Lenovo IdeaPad Pro 5 16IAH10 BIOS

  through PZCN27WW

• Lenovo LOQ 15IAX9E BIOS

  through Q8CN17WW

• Lenovo Yoga 9 2-in-1 14IMH9 BIOS

  through NNCN31WW

References 1