Lenovo Thinkpad S2 Yoga Gen 7 Firmware vulnerabilities

CVE-2023-5078 [MEDIUM] CWE-1419 CVE-2023-5078: A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker wit A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.

CVE-2023-4029 [MEDIUM] CWE-120 CVE-2023-4029: A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad produ A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.