HPSBHF03674 rev. 1 - Synaptics® VFS75xx Fingerprint Sensors Equipped with External Flash

Potential Security Impact

Information Disclosure

Source: HP, HP Product Security Response Team (PSRT)

Reported By: Synaptics®

VULNERABILITY SUMMARY

Synaptics has notified HP of a potential security vulnerability in certain versions of VFS75xx Fingerprint Sensors equipped with external flash, which may allow a local administrator or physical attacker to compromise the confidentiality of the fingerprint sensor’s data.

The Synaptics Security Brief for this vulnerability can be found on the Synaptics product page for Fingerprint Sensors at <https://www.synaptics.com/products/biometrics&gt;[__](<https://www.synaptics.com/products/biometrics&gt; “External site.” ) (in English).

RESOLUTION

Synaptics has released updates to mitigate the potential vulnerability. HP has identified platforms with affected devices and target versions for SoftPaqs. See the affected platforms listed below.