The vulnerability of microprogramming software in IBM and Lenovo laptops allows attackers to gain access to confidential information.

The microprogramming software of IBM and Lenovo laptops does not perform buffer cleanup after the password input process is completed. As a result, local malicious individuals can gain access to the BIOS password by directly reading the physical memory addresses used as buffers...