● CVE — High
CVE-2019-18619
Vendorlenovo, synapticsProductthinkpad e490 firmware, thinkpad e490s firmware, thinkpad e590 firmware, thinkpad r490 firmware, thinkpad r590 firmware, thinkpad s3 firmware, thankpad a475 firmware, thankpad a485 firmware, thinkpad 25 firmware, thinkpad e480 firmware, thinkpad e485 firmware, thinkpad e580 firmware, thinkpad e585 firmware, thinkpad l480 firmware, thinkpad l580 firmware, thinkpad p1 firmware, thinkpad p1 gen 2 firmware, thinkpad p43s firmware, thinkpad p50 firmware, thinkpad p51 firmware, thinkpad p51s (20hx) firmware, thinkpad p51s (20jx) firmware, thinkpad p51s (20kx) firmware, thinkpad x1 extreme 2nd firmware, vfs75xx firmwareDiscoveredJul 22, 2020UpdatedNov 21, 2024
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.