Description
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | BIOS | various | — |
Advisories 1
- WID-SEC-2023-2865 Lenovo BIOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2023