● CVE — Medium
CVE-2019-18618
Vendorlenovo, synapticsProductthinkpad e490 firmware, thinkpad e490s firmware, thinkpad e590 firmware, thinkpad r490 firmware, thinkpad r590 firmware, thinkpad s3 firmware, thankpad a475 firmware, thankpad a485 firmware, thinkpad 25 firmware, thinkpad e480 firmware, thinkpad e485 firmware, thinkpad e580 firmware, thinkpad e585 firmware, thinkpad l480 firmware, thinkpad l580 firmware, thinkpad p1 firmware, thinkpad p1 gen 2 firmware, thinkpad p43s firmware, thinkpad p50 firmware, thinkpad p51 firmware, thinkpad p51s (20hx) firmware, thinkpad p51s (20jx) firmware, thinkpad p51s (20kx) firmware, thinkpad x1 extreme 2nd firmware, vfs75xx firmwareDiscoveredJul 22, 2020UpdatedNov 21, 2024
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.