Read the docs

Synaptics

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Synaptics records in CISA KEV

No Synaptics vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fingerprint Driver 2 records LOW Vfs75xx Firmware 2 records LOW Displaylink 1 record LOW Displaylink Usb Graphics 1 record LOW Smart Audio Uwp 1 record LOW Sound Device 1 record MEDIUM

Records

2 records in Fingerprint Driver · all components

TI-2021-02615 CVE-2021-3675 · GHSA-mqp4-mr97-536g

synaTEE.signed.dll Out-Of-Bounds Heap Write

Priority LOW 31

Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00273 Published 2022-06-16 Fixed in xxx=340, xxxx=3541 +9 CWE-20
TI-2023-05940 CVE-2023-6482 · GHSA-g5jr-34r4-rv4w

Encryption key derived from static host information

Priority LOW 23

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00132 Published 2024-01-27 Fixed in 6.0.17.1103 CWE-321
Open these records in search →