Lenovo X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS

• CVE-2025-10238 Medium 6.7 During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System 0.1%
• CVE-2025-10237 Medium 6.7 During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or wr <0.1%