CVE-2020-8337

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2020-06-09

Last modified

2024-09-16

Weaknesses

CWE-428

Affected products

• Synaptics Smart Audio Uwp App (Lenovo)
• Smart Audio Uwp (Synaptics)

References

• https://support.lenovo.com/us/en/product_security/len-30707
• https://www.synaptics.com/sites/default/files/audio-driver-security-brief-2020-06-09.pdf