CVEvulnerability

CVE-2019-18618

6.0 MEDIUM Published 2020-07-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N

Description

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.

Affected configurations

• synaptics vfs75xx firmware 5.1.5.51 • synaptics vfs75xx firmware 5.1.337.26 • synaptics vfs75xx firmware 5.1.3507.26 • synaptics vfs75xx firmware 5.2.320.26 • synaptics vfs75xx firmware 5.2.524.26 • synaptics vfs75xx firmware 5.2.3109.26 • synaptics vfs75xx firmware 5.2.3530.26 • synaptics vfs75xx firmware 5.2.5024.26 • synaptics vfs75xx firmware 5.3.3541.26 • synaptics vfs75xx firmware 5.5.4.1116 • synaptics vfs75xx firmware 5.5.8.1092 • synaptics vfs75xx firmware 5.5.10.1100 • synaptics vfs75xx firmware 5.5.10.1106 • synaptics vfs75xx firmware 5.5.17.1099 • synaptics vfs75xx firmware 5.5.17.1102 • synaptics vfs75xx firmware 5.5.35.1058 • synaptics vfs75xx firmware 5.5.502.79 • synaptics vfs75xx firmware 5.5.512.1051 • synaptics vfs75xx firmware 5.5.2734.1050 • synaptics vfs75xx firmware 5.5.2810.1050 • lenovo thinkpad 25 firmware (< 5.2.3540.26) • lenovo thankpad a475 firmware (< 5.02.3539.0026) • lenovo thankpad a485 firmware (< 5.03.3542.0026) • lenovo thinkpad e480 firmware (< 5.2.321.26) • lenovo thinkpad e580 firmware (< 5.2.321.26) • lenovo thinkpad e485 firmware (< 5.2.321.26) • lenovo thinkpad e585 firmware (< 5.2.321.26) • lenovo thinkpad e490s firmware (< 5.2.321.26) • lenovo thinkpad s3 firmware (< 5.2.321.26) • lenovo thinkpad e490 firmware (< 5.2.321.26) • lenovo thinkpad e590 firmware (< 5.2.321.26) • lenovo thinkpad r490 firmware (< 5.2.321.26) • lenovo thinkpad r590 firmware (< 5.2.321.26) • lenovo thinkpad l480 firmware (< 5.3.3542.26) • lenovo thinkpad l580 firmware (< 5.3.3542.26) • lenovo thinkpad p1 firmware (< 5.3.3542.26) • lenovo thinkpad p1 gen 2 firmware (< 6.0.36.1105) • lenovo thinkpad x1 extreme 2nd firmware (< 6.0.36.1105) • lenovo thinkpad p43s firmware (< 6.0.36.1105) • lenovo thinkpad p50 firmware (< 5.1.338.26) • lenovo thinkpad p51 firmware (< 5.2.3540.26) • lenovo thinkpad p51s \(20jx\) firmware (< 5.2.3540.26) • lenovo thinkpad p51s \(20kx\) firmware (< 5.2.3540.26) • lenovo thinkpad p51s \(20hx\) firmware (< 5.2.3540.26) • lenovo thinkpad p52 firmware (< 5.2.3540.26) • lenovo thinkpad p52s firmware (< 5.3.3542.26) • lenovo thinkpad p53 firmware (< 6.0.36.1105) • lenovo thinkpad p53s firmware (< 6.0.36.1105) • lenovo thinkpad p70 firmware (< 5.1.338.26) • lenovo thinkpad p71 \(20hx\) firmware (< 5.2.3540.26) • lenovo thinkpad p72 firmware (< 5.3.3542.26) • lenovo thinkpad p73 firmware (< 5.3.3542.26) • lenovo thinkpad t25 \(20k7\) firmware (< 5.2.3540.26) • lenovo thinkpad t460p firmware (< 5.1.338.26) • lenovo thinkpad t460s firmware (< 5.1.338.26) • lenovo thinkpad t470 \(20hx\) firmware (< 5.2.3540.26) • lenovo thinkpad t470 \(20jx\) firmware (< 5.2.3540.26) • lenovo thinkpad t470p firmware (< 5.2.3540.26) • lenovo thinkpad t470s \(20hx\) firmware (< 5.2.3540.26) • lenovo thinkpad t470s \(20jx\) firmware (< 5.2.3540.26) … and 92 more

References