synaptics vfs75xx_firmware 对无效指针或索引的释放

CVE编号

CVE-2019-18619

利用情况

暂无

补丁情况

N/A

披露时间

2020-07-23
漏洞描述
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
https://support.hp.com/hk-en/document/c06696568
https://support.lenovo.com/us/en/product_security/LEN-31372
https://www.synaptics.com/company/blog/
https://www.synaptics.com/sites/default/files/fingerprint-driver-SGX-security...
https://www.syssec.wiwi.uni-due.de/en/research/research-projects/analysis-of-...
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 hp envy_-_13t-ah100_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_-_13t-aq100_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_-_17t-bw000_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_-_17t-ce000_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_-_17t-ce100_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_13-ah0xxx_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_13-ah1xxx_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_13-aq0xxx_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_13-aq1xxx_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_15-cn0xxx_x360_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_15-cn1xxx_x360_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_15-dr0xxx_x360_(validity_fps)_firmware * Up to
(excluding)
5.5.26.1102
运行在以下环境
系统 hp envy_15-dr0xxx_x360_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_15-dr1xxx_x360_(validity_fps)_firmware * Up to
(excluding)
5.5.26.1102
运行在以下环境
系统 hp envy_15-dr1xxx_x360_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_15m-cn0xxx_x360_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_15m-dr0xxx_x360_(validity_fps)_firmware * Up to
(excluding)
5.5.26.1102
运行在以下环境
系统 hp envy_15m-dr0xxx_x360_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_15m-dr1xxx_x360_(validity_fps)_firmware * Up to
(excluding)
5.5.26.1102
运行在以下环境
系统 hp envy_15m-dr1xxx_x360_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_17-bw0xxx_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_17-ce0xxx_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_17-ce1xxx_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_17m-bw0xxx_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_17m-ce0xxx_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_17m-ce1xxx_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_x360_-_15t-cn000_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp envy_x360_-_15t-dr000_(validity_fps)_firmware * Up to
(excluding)
5.5.26.1102
运行在以下环境
系统 hp envy_x360_-_15t-dr000_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp envy_x360_-_15t-dr100_(validity_fps)_firmware * Up to
(excluding)
5.5.26.1102
运行在以下环境
系统 hp envy_x360_-_15t-dr100_firmware * Up to
(excluding)
6.0.39.1111
运行在以下环境
系统 hp pavilion_14-cd1xxx_x360_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp pavilion_14-cd2xxx_x360_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp pavilion_14-dh0xxx_x360_firmware * Up to
(excluding)
5.5.8.1116
运行在以下环境
系统 hp pavilion_14m-cd0xxx_x360_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp pavilion_14m-dh0xxx_x360_firmware * Up to
(excluding)
5.5.8.1116
运行在以下环境
系统 hp pavilion_15_firmware * Up to
(excluding)
5.5.8.1116
运行在以下环境
系统 hp pavilion_x360_-_14t-cd000_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp pavilion_x360_-_15t-dq000_firmware * Up to
(excluding)
5.5.8.1116
运行在以下环境
系统 hp pavilion_x360_-_15t-dq100_firmware * Up to
(excluding)
5.5.8.1116
运行在以下环境
系统 hp pavilion_x360_14t-cd100_firmware * Up to
(excluding)
5.5.11.1093
运行在以下环境
系统 hp pavilion_x360_14t-dh000_firmware * Up to
(excluding)
5.5.8.1116
运行在以下环境
系统 hp spectre_x360_firmware * Up to
(excluding)
5.5.26.1102
运行在以下环境
系统 lenovo thankpad_a475_firmware * Up to
(excluding)
5.02.3539.0026
运行在以下环境
系统 lenovo thankpad_a485_firmware * Up to
(excluding)
5.03.3542.0026
运行在以下环境
系统 lenovo thinkpad_25_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_a275_firmware * Up to
(excluding)
5.2.3535.26
运行在以下环境
系统 lenovo thinkpad_e480_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_e485_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_e490s_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_e490_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_e580_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_e585_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_e590_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_l480_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_l580_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_p1_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_p1_gen_2_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_p43s_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_p50_firmware * Up to
(excluding)
5.1.338.26
运行在以下环境
系统 lenovo thinkpad_p51s_(20hx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_p51s_(20jx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_p51s_(20kx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_p51_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_p52s_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_p52_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_p53s_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_p53_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_p70_firmware * Up to
(excluding)
5.1.338.26
运行在以下环境
系统 lenovo thinkpad_p71_(20hx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_p72_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_p73_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_r490_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_r590_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_s1_3rd_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_s3_firmware * Up to
(excluding)
5.2.321.26
运行在以下环境
系统 lenovo thinkpad_t25_(20k7)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_t460p_firmware * Up to
(excluding)
5.1.338.26
运行在以下环境
系统 lenovo thinkpad_t460s_firmware * Up to
(excluding)
5.1.338.26
运行在以下环境
系统 lenovo thinkpad_t470p_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_t470s_(20hx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_t470s_(20jx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_t470_(20hx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_t470_(20jx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_t480s_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_t480_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_t490s_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_t490_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_t570(20jx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_t570_(20hx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_t580_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_t590_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_x1_carbon_(20hx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_x1_carbon_(20kx)_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_x1_carbon_firmware * Up to
(excluding)
5.1.338.26
运行在以下环境
系统 lenovo thinkpad_x1_extreme_2nd_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_x1_extreme_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_x1_tablet_(20jx)_firmware * Up to
(excluding)
5.2.227.26
运行在以下环境
系统 lenovo thinkpad_x1_tablet_firmware * Up to
(excluding)
5.5.40.1058
运行在以下环境
系统 lenovo thinkpad_x1_yoga_(20jx)_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_x1_yoga_3rd_gen_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_x1_yoga_4th_gen_firmware * Up to
(excluding)
5.1.338.26
运行在以下环境
系统 lenovo thinkpad_x1_yoga_firmware * Up to
(excluding)
5.1.338.26
运行在以下环境
系统 lenovo thinkpad_x270_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_x280_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_x380_yoga_firmware * Up to
(excluding)
5.3.3542.26
运行在以下环境
系统 lenovo thinkpad_x390_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_x390_yoga_firmware * Up to
(excluding)
6.0.36.1105
运行在以下环境
系统 lenovo thinkpad_yoga_260_firmware * Up to
(excluding)
5.1.338.26
运行在以下环境
系统 lenovo thinkpad_yoga_370_firmware * Up to
(excluding)
5.2.3540.26
运行在以下环境
系统 lenovo thinkpad_yoga_s1_firmware * Up to
(excluding)
5.1.338.26
运行在以下环境
系统 synaptics vfs75xx_firmware 5.2.225.26 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.2.318.26 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.2.3530.26 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.2.524.26 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.3.3539.26 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.5.10.1093 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.5.11.1106 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.5.15.1102 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.5.2734.1050 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.5.2811.1050 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.5.3.1116 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.5.38.1058 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.5.8.1096 -
运行在以下环境
系统 synaptics vfs75xx_firmware 5.6.23.1000 -
运行在以下环境
系统 synaptics vfs75xx_firmware 6.0.14.1108 -
运行在以下环境
系统 synaptics vfs75xx_firmware 6.0.32.1104 -
运行在以下环境
系统 synaptics vfs75xx_firmware 6.0.42.1107 -
运行在以下环境
硬件 hp envy_-_13t-ah100 - -
运行在以下环境
硬件 hp envy_-_13t-aq100 - -
运行在以下环境
硬件 hp envy_-_17t-bw000 - -
运行在以下环境
硬件 hp envy_-_17t-ce000 - -
运行在以下环境
硬件 hp envy_-_17t-ce100 - -
运行在以下环境
硬件 hp envy_13-ah0xxx - -
运行在以下环境
硬件 hp envy_13-ah1xxx - -
运行在以下环境
硬件 hp envy_13-aq0xxx - -
运行在以下环境
硬件 hp envy_13-aq1xxx - -
运行在以下环境
硬件 hp envy_15-cn0xxx_x360 - -
运行在以下环境
硬件 hp envy_15-cn1xxx_x360 - -
运行在以下环境
硬件 hp envy_15-dr0xxx_x360 - -
运行在以下环境
硬件 hp envy_15-dr0xxx_x360_(validity_fps) - -
运行在以下环境
硬件 hp envy_15-dr1xxx_x360 - -
运行在以下环境
硬件 hp envy_15-dr1xxx_x360_(validity_fps) - -
运行在以下环境
硬件 hp envy_15m-cn0xxx_x360 - -
运行在以下环境
硬件 hp envy_15m-dr0xxx_x360 - -
运行在以下环境
硬件 hp envy_15m-dr0xxx_x360_(validity_fps) - -
运行在以下环境
硬件 hp envy_15m-dr1xxx_x360 - -
运行在以下环境
硬件 hp envy_15m-dr1xxx_x360_(validity_fps) - -
运行在以下环境
硬件 hp envy_17-bw0xxx - -
运行在以下环境
硬件 hp envy_17-ce0xxx - -
运行在以下环境
硬件 hp envy_17-ce1xxx - -
运行在以下环境
硬件 hp envy_17m-bw0xxx - -
运行在以下环境
硬件 hp envy_17m-ce0xxx - -
运行在以下环境
硬件 hp envy_17m-ce1xxx - -
运行在以下环境
硬件 hp envy_x360_-_15t-cn000 - -
运行在以下环境
硬件 hp envy_x360_-_15t-dr000 - -
运行在以下环境
硬件 hp envy_x360_-_15t-dr000_(validity_fps) - -
运行在以下环境
硬件 hp envy_x360_-_15t-dr100 - -
运行在以下环境
硬件 hp envy_x360_-_15t-dr100_(validity_fps) - -
运行在以下环境
硬件 hp pavilion_14-cd1xxx_x360 - -
运行在以下环境
硬件 hp pavilion_14-cd2xxx_x360 - -
运行在以下环境
硬件 hp pavilion_14-dh0xxx_x360 - -
运行在以下环境
硬件 hp pavilion_14m-cd0xxx_x360 - -
运行在以下环境
硬件 hp pavilion_14m-dh0xxx_x360 - -
运行在以下环境
硬件 hp pavilion_15 - -
运行在以下环境
硬件 hp pavilion_x360_-_14t-cd000 - -
运行在以下环境
硬件 hp pavilion_x360_-_15t-dq000 - -
运行在以下环境
硬件 hp pavilion_x360_-_15t-dq100 - -
运行在以下环境
硬件 hp pavilion_x360_14t-cd100 - -
运行在以下环境
硬件 hp pavilion_x360_14t-dh000 - -
运行在以下环境
硬件 hp spectre_x360 - -
运行在以下环境
硬件 lenovo thankpad_a475 - -
运行在以下环境
硬件 lenovo thankpad_a485 - -
运行在以下环境
硬件 lenovo thinkpad_25 - -
运行在以下环境
硬件 lenovo thinkpad_a275 - -
运行在以下环境
硬件 lenovo thinkpad_e480 - -
运行在以下环境
硬件 lenovo thinkpad_e485 - -
运行在以下环境
硬件 lenovo thinkpad_e490 - -
运行在以下环境
硬件 lenovo thinkpad_e490s - -
运行在以下环境
硬件 lenovo thinkpad_e580 - -
运行在以下环境
硬件 lenovo thinkpad_e585 - -
运行在以下环境
硬件 lenovo thinkpad_e590 - -
运行在以下环境
硬件 lenovo thinkpad_l480 - -
运行在以下环境
硬件 lenovo thinkpad_l580 - -
运行在以下环境
硬件 lenovo thinkpad_p1 - -
运行在以下环境
硬件 lenovo thinkpad_p1_gen_2 - -
运行在以下环境
硬件 lenovo thinkpad_p43s - -
运行在以下环境
硬件 lenovo thinkpad_p50 - -
运行在以下环境
硬件 lenovo thinkpad_p51 - -
运行在以下环境
硬件 lenovo thinkpad_p51s_(20hx) - -
运行在以下环境
硬件 lenovo thinkpad_p51s_(20jx) - -
运行在以下环境
硬件 lenovo thinkpad_p51s_(20kx) - -
运行在以下环境
硬件 lenovo thinkpad_p52 - -
运行在以下环境
硬件 lenovo thinkpad_p52s - -
运行在以下环境
硬件 lenovo thinkpad_p53 - -
运行在以下环境
硬件 lenovo thinkpad_p53s - -
运行在以下环境
硬件 lenovo thinkpad_p70 - -
运行在以下环境
硬件 lenovo thinkpad_p71_(20hx) - -
运行在以下环境
硬件 lenovo thinkpad_p72 - -
运行在以下环境
硬件 lenovo thinkpad_p73 - -
运行在以下环境
硬件 lenovo thinkpad_r490 - -
运行在以下环境
硬件 lenovo thinkpad_r590 - -
运行在以下环境
硬件 lenovo thinkpad_s1_3rd - -
运行在以下环境
硬件 lenovo thinkpad_s3 - -
运行在以下环境
硬件 lenovo thinkpad_t25_(20k7) - -
运行在以下环境
硬件 lenovo thinkpad_t460p - -
运行在以下环境
硬件 lenovo thinkpad_t460s - -
运行在以下环境
硬件 lenovo thinkpad_t470p - -
运行在以下环境
硬件 lenovo thinkpad_t470s_(20hx) - -
运行在以下环境
硬件 lenovo thinkpad_t470s_(20jx) - -
运行在以下环境
硬件 lenovo thinkpad_t470_(20hx) - -
运行在以下环境
硬件 lenovo thinkpad_t470_(20jx) - -
运行在以下环境
硬件 lenovo thinkpad_t480 - -
运行在以下环境
硬件 lenovo thinkpad_t480s - -
运行在以下环境
硬件 lenovo thinkpad_t490 - -
运行在以下环境
硬件 lenovo thinkpad_t490s - -
运行在以下环境
硬件 lenovo thinkpad_t570(20jx) - -
运行在以下环境
硬件 lenovo thinkpad_t570_(20hx) - -
运行在以下环境
硬件 lenovo thinkpad_t580 - -
运行在以下环境
硬件 lenovo thinkpad_t590 - -
运行在以下环境
硬件 lenovo thinkpad_x1_carbon - -
运行在以下环境
硬件 lenovo thinkpad_x1_carbon_(20hx) - -
运行在以下环境
硬件 lenovo thinkpad_x1_carbon_(20kx) - -
运行在以下环境
硬件 lenovo thinkpad_x1_extreme - -
运行在以下环境
硬件 lenovo thinkpad_x1_extreme_2nd - -
运行在以下环境
硬件 lenovo thinkpad_x1_tablet - -
运行在以下环境
硬件 lenovo thinkpad_x1_tablet_(20jx) - -
运行在以下环境
硬件 lenovo thinkpad_x1_yoga - -
运行在以下环境
硬件 lenovo thinkpad_x1_yoga_(20jx) - -
运行在以下环境
硬件 lenovo thinkpad_x1_yoga_3rd_gen - -
运行在以下环境
硬件 lenovo thinkpad_x1_yoga_4th_gen - -
运行在以下环境
硬件 lenovo thinkpad_x270 - -
运行在以下环境
硬件 lenovo thinkpad_x280 - -
运行在以下环境
硬件 lenovo thinkpad_x380_yoga - -
运行在以下环境
硬件 lenovo thinkpad_x390 - -
运行在以下环境
硬件 lenovo thinkpad_x390_yoga - -
运行在以下环境
硬件 lenovo thinkpad_yoga_260 - -
运行在以下环境
硬件 lenovo thinkpad_yoga_370 - -
运行在以下环境
硬件 lenovo thinkpad_yoga_s1 - -
运行在以下环境
硬件 synaptics vfs75xx - -
CVSS3评分
7.8
  • 攻击路径
    本地
  • 攻击复杂度
    低
  • 权限要求
    低
  • 影响范围
    未更改
  • 用户交互
    无
  • 可用性
    高
  • 保密性
    高
  • 完整性
    高
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-ID 漏洞类型
CWE-763 对无效指针或索引的释放
阿里云安全产品覆盖情况