CVE-2019-18619
High
Description
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.
SeverityHigh
CVSS7.8
Exploit probability—
ProductSynaptics Vfs75xx Firmware
PublishedJul 22, 2020
First seenJul 22, 2020
How to fix
Update
- lenovo thinkpad_25_firmware5.2.3540.26 or later
- lenovo thankpad_a475_firmware5.02.3539.0026 or later
- lenovo thankpad_a485_firmware5.03.3542.0026 or later
- lenovo thinkpad_e480_firmware5.2.321.26 or later
- lenovo thinkpad_e580_firmware5.2.321.26 or later
- lenovo thinkpad_e485_firmware5.2.321.26 or later
- lenovo thinkpad_e585_firmware5.2.321.26 or later
- lenovo thinkpad_e490s_firmware5.2.321.26 or later
- lenovo thinkpad_s3_firmware5.2.321.26 or later
- lenovo thinkpad_e490_firmware5.2.321.26 or later
- lenovo thinkpad_e590_firmware5.2.321.26 or later
- lenovo thinkpad_r490_firmware5.2.321.26 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| synaptics vfs75xx_firmware | 5.2.225.26, 5.2.318.26, 5.2.524.26, 5.2.3530.26, 5.3.3539.26, 5.5.3.1116, 5.5.8.1096, 5.5.10.1093, 5.5.11.1106, 5.5.15.1102, 5.5.38.1058, 5.5.2734.1050, 5.5.2811.1050, 5.6.23.1000, 6.0.14.1108, 6.0.32.1104, 6.0.42.1107 | — |
| lenovo thinkpad_25_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thankpad_a475_firmware | v < 5.02.3539.0026 | 5.02.3539.0026 |
| lenovo thankpad_a485_firmware | v < 5.03.3542.0026 | 5.03.3542.0026 |
| lenovo thinkpad_e480_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_e580_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_e485_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_e585_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_e490s_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_s3_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_e490_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_e590_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_r490_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_r590_firmware | v < 5.2.321.26 | 5.2.321.26 |
| lenovo thinkpad_l480_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_l580_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_p1_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_p1_gen_2_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_x1_extreme_2nd_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_p43s_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_p50_firmware | v < 5.1.338.26 | 5.1.338.26 |
| lenovo thinkpad_p51_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_p51s_\(20jx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_p51s_\(20kx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_p51s_\(20hx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_p52_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_p52s_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_p53_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_p53s_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_p70_firmware | v < 5.1.338.26 | 5.1.338.26 |
| lenovo thinkpad_p71_\(20hx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_p72_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_p73_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_t25_\(20k7\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_t460p_firmware | v < 5.1.338.26 | 5.1.338.26 |
| lenovo thinkpad_t460s_firmware | v < 5.1.338.26 | 5.1.338.26 |
| lenovo thinkpad_t470_\(20hx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_t470_\(20jx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_t470p_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_t470s_\(20hx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_t470s_\(20jx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_t480_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_t480s_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_t490_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_t490s_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_t570_\(20hx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_t570\(20jx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_t580_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_t590_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_x1_carbon_\(20hx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_x1_carbon_\(20kx\)_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_x1_carbon_firmware | v < 5.1.338.26 | 5.1.338.26 |
| lenovo thinkpad_x1_yoga_4th_gen_firmware | v < 5.1.338.26 | 5.1.338.26 |
| lenovo thinkpad_x1_extreme_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_x1_tablet_firmware | v < 5.5.40.1058 | 5.5.40.1058 |
| lenovo thinkpad_x1_tablet_\(20jx\)_firmware | v < 5.2.227.26 | 5.2.227.26 |
| lenovo thinkpad_x1_yoga_firmware | v < 5.1.338.26 | 5.1.338.26 |
| lenovo thinkpad_x1_yoga_\(20jx\)_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_x1_yoga_3rd_gen_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_x270_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_x280_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_x380_yoga_firmware | v < 5.3.3542.26 | 5.3.3542.26 |
| lenovo thinkpad_x390_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_x390_yoga_firmware | v < 6.0.36.1105 | 6.0.36.1105 |
| lenovo thinkpad_yoga_370_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_s1_3rd_firmware | v < 5.2.3540.26 | 5.2.3540.26 |
| lenovo thinkpad_yoga_260_firmware | v < 5.1.338.26 | 5.1.338.26 |
| lenovo thinkpad_yoga_s1_firmware | v < 5.1.338.26 | 5.1.338.26 |
| lenovo thinkpad_a275_firmware | v < 5.2.3535.26 | 5.2.3535.26 |
| hp envy_-_13t-ah100_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_-_13t-aq100_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_13-ah0xxx_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_13-ah1xxx_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_13-aq0xxx_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_13-aq1xxx_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_-_17t-bw000_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_-_17t-ce000_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_-_17t-ce100_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_17-bw0xxx_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_17-ce0xxx_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_17-ce1xxx_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_17m-bw0xxx_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_17m-ce0xxx_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_17m-ce1xxx_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_x360_-_15t-cn000_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_x360_-_15t-dr000_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_x360_-_15t-dr000_\(validity_fps\)_firmware | v < 5.5.26.1102 | 5.5.26.1102 |
| hp envy_x360_-_15t-dr100_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_x360_-_15t-dr100_\(validity_fps\)_firmware | v < 5.5.26.1102 | 5.5.26.1102 |
| hp envy_15-cn0xxx_x360_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_15-cn1xxx_x360_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_15-dr0xxx_x360_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_15-dr0xxx_x360_\(validity_fps\)_firmware | v < 5.5.26.1102 | 5.5.26.1102 |
| hp envy_15-dr1xxx_x360_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_15-dr1xxx_x360_\(validity_fps\)_firmware | v < 5.5.26.1102 | 5.5.26.1102 |
| hp envy_15m-cn0xxx_x360_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp envy_15m-dr0xxx_x360_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_15m-dr0xxx_x360_\(validity_fps\)_firmware | v < 5.5.26.1102 | 5.5.26.1102 |
| hp envy_15m-dr1xxx_x360_firmware | v < 6.0.39.1111 | 6.0.39.1111 |
| hp envy_15m-dr1xxx_x360_\(validity_fps\)_firmware | v < 5.5.26.1102 | 5.5.26.1102 |
| hp pavilion_x360_-_14t-cd000_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp pavilion_x360_-_15t-dq000_firmware | v < 5.5.8.1116 | 5.5.8.1116 |
| hp pavilion_x360_-_15t-dq100_firmware | v < 5.5.8.1116 | 5.5.8.1116 |
| hp pavilion_x360_14t-cd100_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp pavilion_x360_14t-dh000_firmware | v < 5.5.8.1116 | 5.5.8.1116 |
| hp pavilion_14-cd1xxx_x360_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp pavilion_14-cd2xxx_x360_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp pavilion_14-dh0xxx_x360_firmware | v < 5.5.8.1116 | 5.5.8.1116 |
| hp pavilion_14m-cd0xxx_x360_firmware | v < 5.5.11.1093 | 5.5.11.1093 |
| hp pavilion_14m-dh0xxx_x360_firmware | v < 5.5.8.1116 | 5.5.8.1116 |
| hp pavilion_15_firmware | v < 5.5.8.1116 | 5.5.8.1116 |
| hp spectre_x360_firmware | v < 5.5.26.1102 | 5.5.26.1102 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.