CVE-2019-18619
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2020-07-22
- Last modified
- 2024-08-05
- Weaknesses
- CWE-763
Affected products
- Envy - 13t-ah100 Firmware (Hp)
- Envy - 13t-aq100 Firmware (Hp)
- Envy - 17t-bw000 Firmware (Hp)
- Envy - 17t-ce000 Firmware (Hp)
- Envy - 17t-ce100 Firmware (Hp)
- Envy 13-ah0xxx Firmware (Hp)
- Envy 13-ah1xxx Firmware (Hp)
- Envy 13-aq0xxx Firmware (Hp)
- Envy 13-aq1xxx Firmware (Hp)
- Envy 15-cn0xxx X360 Firmware (Hp)
- Envy 15-cn1xxx X360 Firmware (Hp)
- Envy 15-dr0xxx X360 (validity Fps) Firmware (Hp)
- Envy 15-dr0xxx X360 Firmware (Hp)
- Envy 15-dr1xxx X360 (validity Fps) Firmware (Hp)
- Envy 15-dr1xxx X360 Firmware (Hp)
- Envy 15m-cn0xxx X360 Firmware (Hp)
- Envy 15m-dr0xxx X360 (validity Fps) Firmware (Hp)
- Envy 15m-dr0xxx X360 Firmware (Hp)
- Envy 15m-dr1xxx X360 (validity Fps) Firmware (Hp)
- Envy 15m-dr1xxx X360 Firmware (Hp)
- Envy 17-bw0xxx Firmware (Hp)
- Envy 17-ce0xxx Firmware (Hp)
- Envy 17-ce1xxx Firmware (Hp)
- Envy 17m-bw0xxx Firmware (Hp)
- Envy 17m-ce0xxx Firmware (Hp)
- Envy 17m-ce1xxx Firmware (Hp)
- Envy X360 - 15t-cn000 Firmware (Hp)
- Envy X360 - 15t-dr000 (validity Fps) Firmware (Hp)
- Envy X360 - 15t-dr000 Firmware (Hp)
- Envy X360 - 15t-dr100 (validity Fps) Firmware (Hp)
- Envy X360 - 15t-dr100 Firmware (Hp)
- Pavilion 14-cd1xxx X360 Firmware (Hp)
- Pavilion 14-cd2xxx X360 Firmware (Hp)
- Pavilion 14-dh0xxx X360 Firmware (Hp)
- Pavilion 14m-cd0xxx X360 Firmware (Hp)
- Pavilion 14m-dh0xxx X360 Firmware (Hp)
- Pavilion 15 Firmware (Hp)
- Pavilion X360 - 14t-cd000 Firmware (Hp)
- Pavilion X360 - 15t-dq000 Firmware (Hp)
- Pavilion X360 - 15t-dq100 Firmware (Hp)
- Pavilion X360 14t-cd100 Firmware (Hp)
- Pavilion X360 14t-dh000 Firmware (Hp)
- Spectre X360 Firmware (Hp)
- Thankpad A475 Firmware (Lenovo)
- Thankpad A485 Firmware (Lenovo)
- Thinkpad 25 Firmware (Lenovo)
- Thinkpad A275 Firmware (Lenovo)
- Thinkpad E480 Firmware (Lenovo)
- Thinkpad E485 Firmware (Lenovo)
- Thinkpad E490 Firmware (Lenovo)
- Thinkpad E490s Firmware (Lenovo)
- Thinkpad E580 Firmware (Lenovo)
- Thinkpad E585 Firmware (Lenovo)
- Thinkpad E590 Firmware (Lenovo)
- Thinkpad L480 Firmware (Lenovo)
- Thinkpad L580 Firmware (Lenovo)
- Thinkpad P1 Firmware (Lenovo)
- Thinkpad P1 Gen 2 Firmware (Lenovo)
- Thinkpad P43s Firmware (Lenovo)
- Thinkpad P50 Firmware (Lenovo)
- Thinkpad P51 Firmware (Lenovo)
- Thinkpad P51s (20hx) Firmware (Lenovo)
- Thinkpad P51s (20jx) Firmware (Lenovo)
- Thinkpad P51s (20kx) Firmware (Lenovo)
- Thinkpad P52 Firmware (Lenovo)
- Thinkpad P52s Firmware (Lenovo)
- Thinkpad P53 Firmware (Lenovo)
- Thinkpad P53s Firmware (Lenovo)
- Thinkpad P70 Firmware (Lenovo)
- Thinkpad P71 (20hx) Firmware (Lenovo)
- Thinkpad P72 Firmware (Lenovo)
- Thinkpad P73 Firmware (Lenovo)
- Thinkpad R490 Firmware (Lenovo)
- Thinkpad R590 Firmware (Lenovo)
- Thinkpad S1 3rd Firmware (Lenovo)
- Thinkpad S3 Firmware (Lenovo)
- Thinkpad T25 (20k7) Firmware (Lenovo)
- Thinkpad T460p Firmware (Lenovo)
- Thinkpad T460s Firmware (Lenovo)
- Thinkpad T470 (20hx) Firmware (Lenovo)
- Thinkpad T470 (20jx) Firmware (Lenovo)
- Thinkpad T470p Firmware (Lenovo)
- Thinkpad T470s (20hx) Firmware (Lenovo)
- Thinkpad T470s (20jx) Firmware (Lenovo)
- Thinkpad T480 Firmware (Lenovo)
- Thinkpad T480s Firmware (Lenovo)
- Thinkpad T490 Firmware (Lenovo)
- Thinkpad T490s Firmware (Lenovo)
- Thinkpad T570(20jx) Firmware (Lenovo)
- Thinkpad T570 (20hx) Firmware (Lenovo)
- Thinkpad T580 Firmware (Lenovo)
- Thinkpad T590 Firmware (Lenovo)
- Thinkpad X1 Carbon (20hx) Firmware (Lenovo)
- Thinkpad X1 Carbon (20kx) Firmware (Lenovo)
- Thinkpad X1 Carbon Firmware (Lenovo)
- Thinkpad X1 Extreme 2nd Firmware (Lenovo)
- Thinkpad X1 Extreme Firmware (Lenovo)
- Thinkpad X1 Tablet (20jx) Firmware (Lenovo)
- Thinkpad X1 Tablet Firmware (Lenovo)
- Thinkpad X1 Yoga 3rd Gen Firmware (Lenovo)
References
- https://support.hp.com/hk-en/document/c06696568
- https://support.lenovo.com/us/en/product_security/LEN-31372
- https://www.synaptics.com/company/blog/
- https://www.synaptics.com/sites/default/files/fingerprint-driver-SGX-security-brief-2020-07-14.pdf
- https://www.syssec.wiwi.uni-due.de/en/research/research-projects/analysis-of-tee-software/
