349 matches found
gnome-software and fwupd security, bug fix, and enhancement update
appstream-data 8-20200724 - Regenerate the RHEL metadata to include the EPEL apps too - Resolves: 1844488 8-20200630 - Regenerate the RHEL metadata - Resolves: 1844488 fwupd 1.4.2-4.0.1 - Build with the updated Oracle certificate - Use oraclesecureboot301 as certdir Orabug: 29881368 - Use new...
CVE-2019-18618
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...
CVE-2019-18619
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave all versions prior to 2019-11-15 allows a local user to execute arbitrary code in the enclave that can compromise confidentiality of enclave data via APIs that accept invalid pointers...
CVE-2019-18618
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...
Code injection
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave all versions prior to 2019-11-15 allows a local user to execute arbitrary code in the enclave that can compromise confidentiality of enclave data via APIs that accept invalid pointers...
Improper access control
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...
CVE-2019-18618
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash all versions prior to 2019-11-15 allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table...
CVE-2019-18618
CVE-2019-18618 concerns the Synaptics VFS75xx fingerprint sensors with external flash. The firmware exposes an incorrect access control vulnerability that, on all versions prior to 2019-11-15, can let a local administrator or physical attacker access sensor data by injecting an unverified partiti...
CVE-2019-18619
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave all versions prior to 2019-11-15 allows a local user to execute arbitrary code in the enclave that can compromise confidentiality of enclave data via APIs that accept invalid pointers...
CVE-2019-18619
The CVE-2019-18619 entry concerns the synaTee component of Synaptics Fingerprint (WBF) drivers that use Intel SGX. All versions prior to 2019-11-15 are affected. The root cause is incorrect parameter validation that allows a local attacker to execute arbitrary code inside the SGX enclave by passi...
HPSBHF03675 rev. 1 - Synaptics® Fingerprint Drivers that use SGX
Potential Security Impact Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported By: Synaptics ® VULNERABILITY SUMMARY Synaptics has notified HP of a potential security vulnerability in certain versions of Synaptics Fingerprint Sensor Drivers using Intel® Software...
HPSBHF03674 rev. 1 - Synaptics® VFS75xx Fingerprint Sensors Equipped with External Flash
Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Synaptics® VULNERABILITY SUMMARY Synaptics has notified HP of a potential security vulnerability in certain versions of VFS75xx Fingerprint Sensors equipped with external flash, which...
CVE-2020-8337
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...
CVE-2020-8337
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...
Design/Logic Flaw
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...
CVE-2020-8337
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...
CVE-2020-8337
CVE-2020-8337 concerns an unquoted search path vulnerability in the Synaptics Smart Audio UWP app (DCHU drivers) on Lenovo platforms, affecting versions prior to 1.0.83.0. The issue is exploitable locally by an administrative user and could allow arbitrary code execution without user interaction....
Synaptics Audio Driver Vulnerability - Lenovo Support US
No description provided...
Synaptics Audio Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30707 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8337 Summary Description: An unquoted search path vulnerability was reported in Synaptics Audio Driver that could allow an administrative user to...