Lenovo thanks 0xiviel/Eva Crystal (XSource Security) for reporting this vulnerability.

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.