HPSBHF03602 rev. 4 - Synaptics Touchpad Driver for Windows Can Leak Freed Kernel Memory Pointers

Potential Security Impact

Information Disclosure

Source: HP, HP Product Security Response Team (PSRT)

Reported By: Synaptics

VULNERABILITY SUMMARY

The Synaptics TouchPad driver can reveal freed kernel memory pointers through the driver API. This could be used by an unauthorized third party to weaken Windows Kernel Address Space Layout Randomization.

Although the revealed data is no longer in use, these pointers could be used to analyze patterns of kernel memory that have been previously used. An unauthorized third party could then potentially mount kernel-level exploits.

RESOLUTION

HP is currently investigating our systems to determine whether they are impacted and will provide updates as soon as possible. HP recommends keeping your system up to date with the latest firmware and drivers.