CVEvulnerability
CVE-2019-18619
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-07-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-763
Description
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.
Affected configurations
• synaptics vfs75xx firmware 5.2.225.26
• synaptics vfs75xx firmware 5.2.318.26
• synaptics vfs75xx firmware 5.2.524.26
• synaptics vfs75xx firmware 5.2.3530.26
• synaptics vfs75xx firmware 5.3.3539.26
• synaptics vfs75xx firmware 5.5.3.1116
• synaptics vfs75xx firmware 5.5.8.1096
• synaptics vfs75xx firmware 5.5.10.1093
• synaptics vfs75xx firmware 5.5.11.1106
• synaptics vfs75xx firmware 5.5.15.1102
• synaptics vfs75xx firmware 5.5.38.1058
• synaptics vfs75xx firmware 5.5.2734.1050
• synaptics vfs75xx firmware 5.5.2811.1050
• synaptics vfs75xx firmware 5.6.23.1000
• synaptics vfs75xx firmware 6.0.14.1108
• synaptics vfs75xx firmware 6.0.32.1104
• synaptics vfs75xx firmware 6.0.42.1107
• lenovo thinkpad 25 firmware (< 5.2.3540.26)
• lenovo thankpad a475 firmware (< 5.02.3539.0026)
• lenovo thankpad a485 firmware (< 5.03.3542.0026)
• lenovo thinkpad e480 firmware (< 5.2.321.26)
• lenovo thinkpad e580 firmware (< 5.2.321.26)
• lenovo thinkpad e485 firmware (< 5.2.321.26)
• lenovo thinkpad e585 firmware (< 5.2.321.26)
• lenovo thinkpad e490s firmware (< 5.2.321.26)
• lenovo thinkpad s3 firmware (< 5.2.321.26)
• lenovo thinkpad e490 firmware (< 5.2.321.26)
• lenovo thinkpad e590 firmware (< 5.2.321.26)
• lenovo thinkpad r490 firmware (< 5.2.321.26)
• lenovo thinkpad r590 firmware (< 5.2.321.26)
• lenovo thinkpad l480 firmware (< 5.3.3542.26)
• lenovo thinkpad l580 firmware (< 5.3.3542.26)
• lenovo thinkpad p1 firmware (< 5.3.3542.26)
• lenovo thinkpad p1 gen 2 firmware (< 6.0.36.1105)
• lenovo thinkpad x1 extreme 2nd firmware (< 6.0.36.1105)
• lenovo thinkpad p43s firmware (< 6.0.36.1105)
• lenovo thinkpad p50 firmware (< 5.1.338.26)
• lenovo thinkpad p51 firmware (< 5.2.3540.26)
• lenovo thinkpad p51s \(20jx\) firmware (< 5.2.3540.26)
• lenovo thinkpad p51s \(20kx\) firmware (< 5.2.3540.26)
• lenovo thinkpad p51s \(20hx\) firmware (< 5.2.3540.26)
• lenovo thinkpad p52 firmware (< 5.2.3540.26)
• lenovo thinkpad p52s firmware (< 5.3.3542.26)
• lenovo thinkpad p53 firmware (< 6.0.36.1105)
• lenovo thinkpad p53s firmware (< 6.0.36.1105)
• lenovo thinkpad p70 firmware (< 5.1.338.26)
• lenovo thinkpad p71 \(20hx\) firmware (< 5.2.3540.26)
• lenovo thinkpad p72 firmware (< 5.3.3542.26)
• lenovo thinkpad p73 firmware (< 5.3.3542.26)
• lenovo thinkpad t25 \(20k7\) firmware (< 5.2.3540.26)
• lenovo thinkpad t460p firmware (< 5.1.338.26)
• lenovo thinkpad t460s firmware (< 5.1.338.26)
• lenovo thinkpad t470 \(20hx\) firmware (< 5.2.3540.26)
• lenovo thinkpad t470 \(20jx\) firmware (< 5.2.3540.26)
• lenovo thinkpad t470p firmware (< 5.2.3540.26)
• lenovo thinkpad t470s \(20hx\) firmware (< 5.2.3540.26)
• lenovo thinkpad t470s \(20jx\) firmware (< 5.2.3540.26)
• lenovo thinkpad t480 firmware (< 5.3.3542.26)
• lenovo thinkpad t480s firmware (< 5.3.3542.26)
• lenovo thinkpad t490 firmware (< 6.0.36.1105)
… and 68 more
Related
Weakness · CWE (1)
- CWE-763 Release of Invalid Pointer or Reference weakness
References
- https://support.hp.com/hk-en/document/c06696568 Patch, Third Party Advisory
- https://support.lenovo.com/us/en/product_security/LEN-31372 Patch, Third Party Advisory
- https://www.synaptics.com/company/blog/ Vendor Advisory
- https://www.synaptics.com/sites/default/files/fingerprint-driver-SGX-security-brief-2020-07-14.pdf Vendor Advisory
- https://www.syssec.wiwi.uni-due.de/en/research/research-projects/analysis-of-tee-software/ Vendor Advisory
- https://support.hp.com/hk-en/document/c06696568 Patch, Third Party Advisory
- https://support.lenovo.com/us/en/product_security/LEN-31372 Patch, Third Party Advisory
- https://www.synaptics.com/company/blog/ Vendor Advisory
- https://www.synaptics.com/sites/default/files/fingerprint-driver-SGX-security-brief-2020-07-14.pdf Vendor Advisory
- https://www.syssec.wiwi.uni-due.de/en/research/research-projects/analysis-of-tee-software/ Vendor Advisory