synaTEE.signed.dll Driver Disclosure

The vulnerability of the synaTEE.signed.dll library, which is part of the Synaptics Fingerprint Driver software for Lenovo laptops, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

CVE-2021-3675

Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on...

CVE-2021-3675

Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on...

PT-2022-3401 · Synaptics · Synaptics Fingerprint Driver

Name of the Vulnerable Software and Affected Versions: Synaptics Fingerprint Driver versions 5.1.xxx.26 prior to xxx=340 on x86/64 Synaptics Fingerprint Driver versions 5.2.xxxx.26 prior to xxxx=3541 on x86/64 Synaptics Fingerprint Driver versions 5.2.2xx.26 prior to xx=29 on x86/64 Synaptics...

CVE-2019-18619

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave all versions prior to 2019-11-15 allows a local user to execute arbitrary code in the enclave that can compromise confidentiality of enclave data via APIs that accept invalid pointers...

Code injection

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave all versions prior to 2019-11-15 allows a local user to execute arbitrary code in the enclave that can compromise confidentiality of enclave data via APIs that accept invalid pointers...

CVE-2019-18619: Release of Invalid Pointer or Reference

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave all versions prior to 2019-11-15 allows a local user to execute arbitrary code in the enclave that can compromise confidentiality of enclave data via APIs that accept invalid pointers...

PT-2020-9976

Name of the Vulnerable Software and Affected Versions: Synaptics WBF drivers versions prior to 2019-11-15 Description: The issue is related to incorrect parameter validation in the synaTee component of Synaptics WBF drivers that utilize an SGX enclave. This allows a local user to execute arbitrar...