CVE:CVE-2019-18619
CNNVD:CNNVD-202007-945
Synaptics WBF Driver是美国Synaptics公司的一款指纹读取驱动程序。
Synaptics WBF驱动程序（使用SGX安全区）（2019-11-15之前的所有版本））中的synaTee组件中存在安全漏洞，该漏洞源于程序未正确验证参数。本地攻击者可借助API（接收无效指针）利用该漏洞在安全区中执行任意代码，影响安全区数据的保密性 。
solution:Upgrade synaptics vfs75xx_firmware to a higher version than 5.2.225.26,5.2.318.26,5.2.524.26,5.2.3530.26,5.3.3539.26,5.5.3.1116,5.5.8.1096,5.5.10.1093,5.5.11.1106,5.5.15.1102,5.5.38.1058,5.5.2734.1050,5.5.2811.1050,5.6.23.1000,6.0.14.1108,6.0.32.1104,6.0.42.1107,and avoid the version 5.2.225.26,5.2.318.26,5.2.524.26,5.2.3530.26,5.3.3539.26,5.5.3.1116,5.5.8.1096,5.5.10.1093,5.5.11.1106,5.5.15.1102,5.5.38.1058,5.5.2734.1050,5.5.2811.1050,5.6.23.1000,6.0.14.1108,6.0.32.1104,6.0.42.1107; Upgrade lenovo thinkpad_25_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thankpad_a475_firmware to a higher version than 5.02.3539.0026,and avoid the version (,5.02.3539.0026); Upgrade lenovo thankpad_a485_firmware to a higher version than 5.03.3542.0026,and avoid the version (,5.03.3542.0026); Upgrade lenovo thinkpad_e480_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_e580_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_e485_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_e585_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_e490s_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_s3_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_e490_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_e590_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_r490_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_r590_firmware to a higher version than 5.2.321.26,and avoid the version (,5.2.321.26); Upgrade lenovo thinkpad_l480_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_l580_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_p1_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_p1_gen_2_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_x1_extreme_2nd_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_p43s_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_p50_firmware to a higher version than 5.1.338.26,and avoid the version (,5.1.338.26); Upgrade lenovo thinkpad_p51_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_p51s_(20jx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_p51s_(20kx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_p51s_(20hx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_p52_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_p52s_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_p53_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_p53s_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_p70_firmware to a higher version than 5.1.338.26,and avoid the version (,5.1.338.26); Upgrade lenovo thinkpad_p71_(20hx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_p72_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_p73_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_t25_(20k7)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_t460p_firmware to a higher version than 5.1.338.26,and avoid the version (,5.1.338.26); Upgrade lenovo thinkpad_t460s_firmware to a higher version than 5.1.338.26,and avoid the version (,5.1.338.26); Upgrade lenovo thinkpad_t470_(20hx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_t470_(20jx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_t470p_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_t470s_(20hx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_t470s_(20jx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_t480_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_t480s_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_t490_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_t490s_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_t570_(20hx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_t570(20jx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_t580_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_t590_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_x1_carbon_(20hx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_x1_carbon_(20kx)_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_x1_carbon_firmware to a higher version than 5.1.338.26,and avoid the version (,5.1.338.26); Upgrade lenovo thinkpad_x1_yoga_4th_gen_firmware to a higher version than 5.1.338.26,and avoid the version (,5.1.338.26); Upgrade lenovo thinkpad_x1_extreme_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_x1_tablet_firmware to a higher version than 5.5.40.1058,and avoid the version (,5.5.40.1058); Upgrade lenovo thinkpad_x1_tablet_(20jx)_firmware to a higher version than 5.2.227.26,and avoid the version (,5.2.227.26); Upgrade lenovo thinkpad_x1_yoga_firmware to a higher version than 5.1.338.26,and avoid the version (,5.1.338.26); Upgrade lenovo thinkpad_x1_yoga_(20jx)_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_x1_yoga_3rd_gen_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_x270_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_x280_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_x380_yoga_firmware to a higher version than 5.3.3542.26,and avoid the version (,5.3.3542.26); Upgrade lenovo thinkpad_x390_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_x390_yoga_firmware to a higher version than 6.0.36.1105,and avoid the version (,6.0.36.1105); Upgrade lenovo thinkpad_yoga_370_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_s1_3rd_firmware to a higher version than 5.2.3540.26,and avoid the version (,5.2.3540.26); Upgrade lenovo thinkpad_yoga_260_firmware to a higher version than 5.1.338.26,and avoid the version (,5.1.338.26); Upgrade lenovo thinkpad_yoga_s1_firmware to a higher version than 5.1.338.26,and avoid the version (,5.1.338.26); Upgrade lenovo thinkpad_a275_firmware to a higher version than 5.2.3535.26,and avoid the version (,5.2.3535.26); Upgrade hp envy_-_13t-ah100_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_-_13t-aq100_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_13-ah0xxx_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_13-ah1xxx_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_13-aq0xxx_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_13-aq1xxx_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_-_17t-bw000_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_-_17t-ce000_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_-_17t-ce100_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_17-bw0xxx_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_17-ce0xxx_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_17-ce1xxx_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_17m-bw0xxx_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_17m-ce0xxx_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_17m-ce1xxx_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_x360_-_15t-cn000_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_x360_-_15t-dr000_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_x360_-_15t-dr000_(validity_fps)_firmware to a higher version than 5.5.26.1102,and avoid the version (,5.5.26.1102); Upgrade hp envy_x360_-_15t-dr100_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_x360_-_15t-dr100_(validity_fps)_firmware to a higher version than 5.5.26.1102,and avoid the version (,5.5.26.1102); Upgrade hp envy_15-cn0xxx_x360_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_15-cn1xxx_x360_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_15-dr0xxx_x360_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_15-dr0xxx_x360_(validity_fps)_firmware to a higher version than 5.5.26.1102,and avoid the version (,5.5.26.1102); Upgrade hp envy_15-dr1xxx_x360_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_15-dr1xxx_x360_(validity_fps)_firmware to a higher version than 5.5.26.1102,and avoid the version (,5.5.26.1102); Upgrade hp envy_15m-cn0xxx_x360_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp envy_15m-dr0xxx_x360_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_15m-dr0xxx_x360_(validity_fps)_firmware to a higher version than 5.5.26.1102,and avoid the version (,5.5.26.1102); Upgrade hp envy_15m-dr1xxx_x360_firmware to a higher version than 6.0.39.1111,and avoid the version (,6.0.39.1111); Upgrade hp envy_15m-dr1xxx_x360_(validity_fps)_firmware to a higher version than 5.5.26.1102,and avoid the version (,5.5.26.1102); Upgrade hp pavilion_x360_-_14t-cd000_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp pavilion_x360_-_15t-dq000_firmware to a higher version than 5.5.8.1116,and avoid the version (,5.5.8.1116); Upgrade hp pavilion_x360_-_15t-dq100_firmware to a higher version than 5.5.8.1116,and avoid the version (,5.5.8.1116); Upgrade hp pavilion_x360_14t-cd100_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp pavilion_x360_14t-dh000_firmware to a higher version than 5.5.8.1116,and avoid the version (,5.5.8.1116); Upgrade hp pavilion_14-cd1xxx_x360_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp pavilion_14-cd2xxx_x360_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp pavilion_14-dh0xxx_x360_firmware to a higher version than 5.5.8.1116,and avoid the version (,5.5.8.1116); Upgrade hp pavilion_14m-cd0xxx_x360_firmware to a higher version than 5.5.11.1093,and avoid the version (,5.5.11.1093); Upgrade hp pavilion_14m-dh0xxx_x360_firmware to a higher version than 5.5.8.1116,and avoid the version (,5.5.8.1116); Upgrade hp pavilion_15_firmware to a higher version than 5.5.8.1116,and avoid the version (,5.5.8.1116); Upgrade hp spectre_x360_firmware to a higher version than 5.5.26.1102,and avoid the version (,5.5.26.1102)