Reading from Lenovo's advisory, it's not just Lenovo that is affected, but everyone who uses the reference UEFI implementation Tianocore is affected (and as far as I know AMI and Insyde also used parts of Tianocore but I can't say if they copied the affected part)