Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Synaptics Component: Fingerprint Driver Clear all filters
TI-2023-05940 CVE-2023-6482 · GHSA-g5jr-34r4-rv4w

Encryption key derived from static host information

Priority LOW 23

Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00132 Published 2024-01-27 Fixed in 6.0.17.1103 CWE-321
TI-2021-02615 CVE-2021-3675 · GHSA-mqp4-mr97-536g

synaTEE.signed.dll Out-Of-Bounds Heap Write

Priority LOW 31

Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00273 Published 2022-06-16 Fixed in xxx=340, xxxx=3541 +9 CWE-20