CVEvulnerability

CVE-2019-18619

7.8 HIGH Published 2020-07-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-763

Description

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.

Affected configurations

• synaptics vfs75xx firmware 5.2.225.26 • synaptics vfs75xx firmware 5.2.318.26 • synaptics vfs75xx firmware 5.2.524.26 • synaptics vfs75xx firmware 5.2.3530.26 • synaptics vfs75xx firmware 5.3.3539.26 • synaptics vfs75xx firmware 5.5.3.1116 • synaptics vfs75xx firmware 5.5.8.1096 • synaptics vfs75xx firmware 5.5.10.1093 • synaptics vfs75xx firmware 5.5.11.1106 • synaptics vfs75xx firmware 5.5.15.1102 • synaptics vfs75xx firmware 5.5.38.1058 • synaptics vfs75xx firmware 5.5.2734.1050 • synaptics vfs75xx firmware 5.5.2811.1050 • synaptics vfs75xx firmware 5.6.23.1000 • synaptics vfs75xx firmware 6.0.14.1108 • synaptics vfs75xx firmware 6.0.32.1104 • synaptics vfs75xx firmware 6.0.42.1107 • lenovo thinkpad 25 firmware (< 5.2.3540.26) • lenovo thankpad a475 firmware (< 5.02.3539.0026) • lenovo thankpad a485 firmware (< 5.03.3542.0026) • lenovo thinkpad e480 firmware (< 5.2.321.26) • lenovo thinkpad e580 firmware (< 5.2.321.26) • lenovo thinkpad e485 firmware (< 5.2.321.26) • lenovo thinkpad e585 firmware (< 5.2.321.26) • lenovo thinkpad e490s firmware (< 5.2.321.26) • lenovo thinkpad s3 firmware (< 5.2.321.26) • lenovo thinkpad e490 firmware (< 5.2.321.26) • lenovo thinkpad e590 firmware (< 5.2.321.26) • lenovo thinkpad r490 firmware (< 5.2.321.26) • lenovo thinkpad r590 firmware (< 5.2.321.26) • lenovo thinkpad l480 firmware (< 5.3.3542.26) • lenovo thinkpad l580 firmware (< 5.3.3542.26) • lenovo thinkpad p1 firmware (< 5.3.3542.26) • lenovo thinkpad p1 gen 2 firmware (< 6.0.36.1105) • lenovo thinkpad x1 extreme 2nd firmware (< 6.0.36.1105) • lenovo thinkpad p43s firmware (< 6.0.36.1105) • lenovo thinkpad p50 firmware (< 5.1.338.26) • lenovo thinkpad p51 firmware (< 5.2.3540.26) • lenovo thinkpad p51s \(20jx\) firmware (< 5.2.3540.26) • lenovo thinkpad p51s \(20kx\) firmware (< 5.2.3540.26) • lenovo thinkpad p51s \(20hx\) firmware (< 5.2.3540.26) • lenovo thinkpad p52 firmware (< 5.2.3540.26) • lenovo thinkpad p52s firmware (< 5.3.3542.26) • lenovo thinkpad p53 firmware (< 6.0.36.1105) • lenovo thinkpad p53s firmware (< 6.0.36.1105) • lenovo thinkpad p70 firmware (< 5.1.338.26) • lenovo thinkpad p71 \(20hx\) firmware (< 5.2.3540.26) • lenovo thinkpad p72 firmware (< 5.3.3542.26) • lenovo thinkpad p73 firmware (< 5.3.3542.26) • lenovo thinkpad t25 \(20k7\) firmware (< 5.2.3540.26) • lenovo thinkpad t460p firmware (< 5.1.338.26) • lenovo thinkpad t460s firmware (< 5.1.338.26) • lenovo thinkpad t470 \(20hx\) firmware (< 5.2.3540.26) • lenovo thinkpad t470 \(20jx\) firmware (< 5.2.3540.26) • lenovo thinkpad t470p firmware (< 5.2.3540.26) • lenovo thinkpad t470s \(20hx\) firmware (< 5.2.3540.26) • lenovo thinkpad t470s \(20jx\) firmware (< 5.2.3540.26) • lenovo thinkpad t480 firmware (< 5.3.3542.26) • lenovo thinkpad t480s firmware (< 5.3.3542.26) • lenovo thinkpad t490 firmware (< 6.0.36.1105) … and 68 more

Related

Weakness · CWE (1)

  • CWE-763 Release of Invalid Pointer or Reference weakness

References