Lenovo L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS

• CVE-2025-10238 Medium 6.7 During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System 0.1%
• CVE-2025-10237 Medium 6.7 During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or wr <0.1%