CVE-2025-4424 — SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information …
Published: 2025-07-30 · CVSS: 6.0 · CVSS 3.1
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7