CVE-2023-43578 (published 2023-11-08T22:21:21.705Z)
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. 
Affected products: Vendor: Lenovo
Product: Desktop BIOS
Versions: various