Lenovo L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS

• CVE-2025-10238 Medium 6.7 During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System 0.1%
• CVE-2025-10237 Medium 6.7 During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or wr <0.1%