Arbitrary code execution via Update_WMI buffer overflow

Buffer overflow in the Update_WMI module in Lenovo Desktop BIOS allows local users with elevated privileges to execute arbitrary code. The module copies an input buffer into a destination buffer without checking that the input fits, allowing memory beyond the buffer to be overwritten. Exploitation requires local access and elevated privileges; successful exploitation runs attacker-controlled code in the affected firmware context.