The vulnerability of the microprogramming software of ThinkPad Hybrid USB-C with USB-A Dock exists due to insufficient testing of input data. This allows a hacker to execute code with elevated privileges.

The vulnerability of the ThinkPad Hybrid USB-C with USB-A Dock’s microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute code with elevated privileges during package updates or installations...