Lenovo thanks Ryan Johnson and Mohamed Elsabagh of Quokka for reporting this issue.

An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to gather a non-resettable device identifier.

A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications access to device identifiers and system commands.