CVE-2019-18618: Medium severity synaptics vfs75xx firmware vulnerability

Published Jul 22, 2020
·
Updated

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.

Affected Software

285 affected components
Synaptics Vfs75xx Firmware=5.1.5.51
Synaptics Vfs75xx Firmware=5.1.337.26
Synaptics Vfs75xx Firmware=5.1.3507.26
Synaptics Vfs75xx Firmware=5.2.320.26
Synaptics Vfs75xx Firmware=5.2.524.26
Synaptics Vfs75xx Firmware=5.2.3109.26
Synaptics Vfs75xx Firmware=5.2.3530.26
Synaptics Vfs75xx Firmware=5.2.5024.26
Synaptics Vfs75xx Firmware=5.3.3541.26
Synaptics Vfs75xx Firmware=5.5.4.1116
Synaptics Vfs75xx Firmware=5.5.8.1092
Synaptics Vfs75xx Firmware=5.5.10.1100
Synaptics Vfs75xx Firmware=5.5.10.1106
Synaptics Vfs75xx Firmware=5.5.17.1099
Synaptics Vfs75xx Firmware=5.5.17.1102
Synaptics Vfs75xx Firmware=5.5.35.1058
Synaptics Vfs75xx Firmware=5.5.502.79
Synaptics Vfs75xx Firmware=5.5.512.1051
Synaptics Vfs75xx Firmware=5.5.2734.1050
Synaptics Vfs75xx Firmware=5.5.2810.1050
Synaptics VFS75xx
Lenovo Thinkpad 25 Firmware<5.2.3540.26
Lenovo Thinkpad 25
Lenovo Thankpad A475 Firmware<5.02.3539.0026
Lenovo Thankpad A475
Lenovo Thankpad A485 Firmware<5.03.3542.0026
Lenovo Thankpad A485
Lenovo Thinkpad E480 Firmware<5.2.321.26
Lenovo Thinkpad E480
Lenovo Thinkpad E580 Firmware<5.2.321.26
Lenovo Thinkpad E580
Lenovo Thinkpad E485 Firmware<5.2.321.26
Lenovo Thinkpad E485
Lenovo Thinkpad E585 Firmware<5.2.321.26
Lenovo Thinkpad E585
Lenovo Thinkpad E490s Firmware<5.2.321.26
Lenovo Thinkpad E490s
Lenovo Thinkpad S3 Firmware<5.2.321.26
Lenovo Thinkpad S3
Lenovo Thinkpad E490 Firmware<5.2.321.26
Lenovo Thinkpad E490
Lenovo Thinkpad E590 Firmware<5.2.321.26
Lenovo Thinkpad E590
Lenovo Thinkpad R490 Firmware<5.2.321.26
Lenovo Thinkpad R490
Lenovo Thinkpad R590 Firmware<5.2.321.26
Lenovo Thinkpad R590
Lenovo Thinkpad L480 Firmware<5.3.3542.26
Lenovo Thinkpad L480
Lenovo Thinkpad L580 Firmware<5.3.3542.26
Lenovo Thinkpad L580
Lenovo Thinkpad P1 Firmware<5.3.3542.26
Lenovo Thinkpad P1
Lenovo Thinkpad P1 Gen 2 Firmware<6.0.36.1105
Lenovo Thinkpad P1 Gen 2
Lenovo Thinkpad X1 Extreme 2nd Firmware<6.0.36.1105
Lenovo Thinkpad X1 Extreme 2nd
Lenovo Thinkpad P43s Firmware<6.0.36.1105
Lenovo Thinkpad P43s
Lenovo Thinkpad P50 Firmware<5.1.338.26
Lenovo Thinkpad P50
Lenovo Thinkpad P51 Firmware<5.2.3540.26
Lenovo Thinkpad P51
Lenovo Thinkpad P51s \(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad P51s \(20jx\)
Lenovo Thinkpad P51s \(20kx\) Firmware<5.2.3540.26
Lenovo Thinkpad P51s \(20kx\)
Lenovo Thinkpad P51s \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad P51s \(20hx\)
Lenovo Thinkpad P52 Firmware<5.2.3540.26
Lenovo Thinkpad P52
Lenovo Thinkpad P52s Firmware<5.3.3542.26
Lenovo Thinkpad P52s
Lenovo Thinkpad P53 Firmware<6.0.36.1105
Lenovo Thinkpad P53
Lenovo Thinkpad P53s Firmware<6.0.36.1105
Lenovo Thinkpad P53s
Lenovo Thinkpad P70 Firmware<5.1.338.26
Lenovo Thinkpad P70
Lenovo Thinkpad P71 \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad P71 \(20hx\)
Lenovo Thinkpad P72 Firmware<5.3.3542.26
Lenovo Thinkpad P72
Lenovo Thinkpad P73 Firmware<5.3.3542.26
Lenovo Thinkpad P73
Lenovo Thinkpad T25 \(20k7\) Firmware<5.2.3540.26
Lenovo Thinkpad T25 \(20k7\)
Lenovo Thinkpad T460p Firmware<5.1.338.26
Lenovo ThinkPad T460p
Lenovo Thinkpad T460s Firmware<5.1.338.26
Lenovo Thinkpad T460s
Lenovo Thinkpad T470 \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad T470 \(20hx\)
Lenovo Thinkpad T470 \(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad T470 \(20jx\)
Lenovo Thinkpad T470p Firmware<5.2.3540.26
Lenovo Thinkpad T470p
Lenovo Thinkpad T470s \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad T470s \(20hx\)
Lenovo Thinkpad T470s \(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad T470s \(20jx\)
Lenovo Thinkpad T480 Firmware<5.3.3542.26
Lenovo Thinkpad T480
Lenovo Thinkpad T480s Firmware<5.3.3542.26
Lenovo Thinkpad T480s
Lenovo Thinkpad T490 Firmware<6.0.36.1105
Lenovo Thinkpad T490
Lenovo Thinkpad T490s Firmware<6.0.36.1105
Lenovo Thinkpad T490s
Lenovo Thinkpad T570 \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad T570 \(20hx\)
Lenovo Thinkpad T570\(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad T570\(20jx\)
Lenovo Thinkpad T580 Firmware<5.3.3542.26
Lenovo Thinkpad T580
Lenovo Thinkpad T590 Firmware<6.0.36.1105
Lenovo Thinkpad T590
Lenovo Thinkpad X1 Carbon \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad X1 Carbon \(20hx\)
Lenovo Thinkpad X1 Carbon \(20kx\) Firmware<5.3.3542.26
Lenovo Thinkpad X1 Carbon \(20kx\)
Lenovo Thinkpad X1 Carbon Firmware<5.1.338.26
Lenovo ThinkPad X1 Carbon
Lenovo Thinkpad X1 Yoga 4th Gen Firmware<5.1.338.26
Lenovo Thinkpad X1 Yoga 4th Gen
Lenovo Thinkpad X1 Extreme Firmware<5.3.3542.26
Lenovo Thinkpad X1 Extreme
Lenovo Thinkpad X1 Tablet Firmware<5.5.40.1058
Lenovo Thinkpad X1 Tablet
Lenovo Thinkpad X1 Tablet \(20jx\) Firmware<5.2.227.26
Lenovo Thinkpad X1 Tablet \(20jx\)
Lenovo Thinkpad X1 Yoga Firmware<5.1.338.26
Lenovo Thinkpad X1 Yoga
Lenovo Thinkpad X1 Yoga \(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad X1 Yoga \(20jx\)
Lenovo Thinkpad X1 Yoga 3rd Gen Firmware<5.3.3542.26
Lenovo Thinkpad X1 Yoga 3rd Gen
Lenovo Thinkpad X270 Firmware<5.2.3540.26
Lenovo Thinkpad X270
Lenovo Thinkpad X280 Firmware<5.3.3542.26
Lenovo Thinkpad X280
Lenovo Thinkpad X380 Yoga Firmware<5.3.3542.26
Lenovo Thinkpad X380 Yoga
Lenovo Thinkpad X390 Firmware<6.0.36.1105
Lenovo Thinkpad X390
Lenovo Thinkpad X390 Yoga Firmware<6.0.36.1105
Lenovo Thinkpad X390 Yoga
Lenovo Thinkpad Yoga 370 Firmware<5.2.3540.26
Lenovo Thinkpad Yoga 370
Lenovo Thinkpad S1 3rd Firmware<5.2.3540.26
Lenovo Thinkpad S1 3rd
Lenovo Thinkpad Yoga 260 Firmware<5.1.338.26
Lenovo Thinkpad Yoga 260
Lenovo Thinkpad Yoga S1 Firmware<5.1.338.26
Lenovo Thinkpad Yoga S1
Lenovo Thinkpad A275 Firmware<5.2.3535.26
Lenovo Thinkpad A275
HP Elite X2 1012 G2 Firmware<5.2.5026.26
HP Elite X2 1012 G2
HP Elite X2 1013 G3 Firmware<5.5.21.1099
HP Elite X2 1013 G3
HP Elite X2 G4 Firmware<5.5.21.1099
HP Elite X2 G4
HP Elitebook 1040 G4 Firmware<5.2.5026.26
HP Elitebook 1040 G4
HP Elitebook 1050 G1 Firmware<5.5.21.1099
HP Elitebook 1050 G1
HP Elitebook 735 G5 Firmware<5.5.21.1099
HP Elitebook 735 G5
HP Elitebook 735 G6 Firmware<5.5.21.1099
HP Elitebook 735 G6
HP Elitebook 745 G5 Firmware<5.5.21.1099
HP Elitebook 745 G5
HP Elitebook 745 G6 Firmware<5.5.21.1099
HP Elitebook 745 G6
HP Elitebook 755 G5 Firmware<5.5.21.1099
HP Elitebook 755 G5
HP Elitebook 830 G5 Firmware<5.5.21.1099
HP Elitebook 830 G5
HP Elitebook 830 G6 Firmware<5.5.21.1099
HP Elitebook 830 G6
HP Elitebook 836 G5 Firmware<5.5.21.1099
HP Elitebook 836 G5
HP Elitebook 836 G6 Firmware<5.5.21.1099
HP Elitebook 836 G6
HP Elitebook 840 G5 Firmware<5.5.21.1099
HP Elitebook 840 G5
HP Elitebook 840 G5 Healthcare Edition Firmware<5.5.21.1099
HP Elitebook 840 G5 Healthcare Edition
HP Elitebook 840 G6 Firmware<5.5.21.1099
HP Elitebook 840 G6
HP Elitebook 840 G6 Healthcare Edition Firmware<5.5.21.1099
HP Elitebook 840 G6 Healthcare Edition
HP Elitebook 846 G5 Firmware<5.5.21.1099
HP Elitebook 846 G5
HP Elitebook 846 G5 Healthcare Edition Firmware<5.5.21.1099
HP Elitebook 846 G5 Healthcare Edition
HP Elitebook 846 G6 Firmware<5.5.21.1099
HP Elitebook 846 G6
HP Elitebook 846 G6 Healthcare Edition Firmware<5.5.21.1099
HP Elitebook 846 G6 Healthcare Edition
HP Elitebook 850 G5 Firmware<5.5.21.1099
HP Elitebook 850 G5
HP Elitebook 850 G6 Firmware<5.5.21.1099
HP Elitebook 850 G6
HP Elitebook X360 1020 G2 Firmware<5.2.5026.26
HP Elitebook X360 1020 G2
HP Elitebook X360 1030 G2 Firmware<5.2.5026.26
HP Elitebook X360 1030 G2
HP Elitebook X360 1030 G3 Firmware<5.5.21.1099
HP Elitebook X360 1030 G3
HP Elitebook X360 1030 G4 Firmware<5.5.21.1099
HP Elitebook X360 1030 G4
HP Elitebook X360 1040 G5 Firmware<5.5.21.1099
HP Elitebook X360 1040 G5
HP Elitebook X360 1040 G6 Firmware<5.5.21.1099
HP Elitebook X360 1040 G6
HP Elitebook X360 830 G5 Firmware<5.5.21.1099
HP Elitebook X360 830 G5
HP Elitebook X360 830 G6 Firmware<5.5.21.1099
HP Elitebook X360 830 G6
HP Pro X2 612 G2 Firmware<5.2.5026.26
HP Pro X2 612 G2
HP Probook 430 G6 Firmware<5.5.21.1099
HP Probook 430 G6
HP Probook 440 G6 Firmware<5.5.21.1099
HP Probook 440 G6
HP Probook 445 G6 Firmware<5.5.21.1099
HP Probook 445 G6
HP Probook 445r G6 Firmware<5.5.21.1099
HP Probook 445r G6
HP Probook 450 G6 Firmware<5.5.21.1099
HP Probook 450 G6
HP Probook 455 G6 Firmware<5.5.21.1099
HP Probook 455 G6
HP Probook 455r G6 Firmware<5.5.21.1099
HP Probook 455r G6
HP Probook 640 G5 Firmware<5.5.21.1099
HP Probook 640 G5
HP Probook 650 G5 Firmware<5.5.21.1099
HP Probook 650 G5
HP Zbook 14u G5 Firmware<5.5.21.1099
HP Zbook 14u G5
HP Zbook 14u G6 Firmware<5.5.21.1099
HP Zbook 14u G6
HP Zbook 15 G5 Firmware<5.5.21.1099
HP Zbook 15 G5
HP Zbook 15 G6 Firmware<5.5.21.1099
HP Zbook 15 G6
HP Zbook 15u G5 Firmware<5.5.21.1099
HP Zbook 15u G5
HP Zbook 15u G6 Firmware<5.5.21.1099
HP Zbook 15u G6
HP Zbook 17 G5 Firmware<5.5.21.1099
HP Zbook 17 G5
HP Zbook 17 G6 Firmware<5.5.21.1099
HP Zbook 17 G6
HP Zbook Studio G5 Firmware<5.5.21.1099
HP Zbook Studio G5
HP Zbook Studio X360 G5 Firmware<5.5.21.1099
HP Zbook Studio X360 G5
HP Zhan 66 Pro 13 G2 Firmware<5.5.21.1099
HP Zhan 66 Pro 13 G2
HP Zhan 66 Pro 14 G2 Firmware<5.5.21.1099
HP Zhan 66 Pro 14 G2
HP Zhan 66 Pro 15 G2 Firmware<5.5.21.1099
HP Zhan 66 Pro 15 G2
HP Zhan X 13 G2 Firmware<5.5.21.1099
HP Zhan X 13 G2
HP Elite Slice Firmware<5.2.3110.26
HP Elite Slice
HP Eliteone 1000 G1 Firmware<5.2.5026.26
HP Eliteone 1000 G1
HP Eliteone 1000 G2 Firmware<5.5.21.1099
HP Eliteone 1000 G2
HP Mt44 Firmware<5.5.21.1099
HP Mt44
HP Mt45 Firmware<5.5.21.1099
HP Mt45
HP Envy X360 Firmware<5.5.26.1102
HP Envy X360
HP Pavilion X360 Firmware<5.5.8.1116
HP Pavilion X360
HP Spectre X360 Firmware<5.5.26.1102
HP Spectre X360

Remediation

Patch Available

https://support.hp.com/us-en/document/c06696474

Patch Available

https://support.lenovo.com/us/en/product_security/LEN-31372

Event History

Jul 22, 2020
CVE Published
via MITRE·01:21 PM
Data Sourced
via MITRE·01:21 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2019-18618?

CVE-2019-18618 has a high severity rating due to the potential for a local administrator or physical attacker to compromise the confidentiality of sensor data.

2

How do I fix CVE-2019-18618?

To fix CVE-2019-18618, users should update the firmware of the affected Synaptics VFS75xx fingerprint sensors to versions released after November 15, 2019.

3

Who is affected by CVE-2019-18618?

CVE-2019-18618 affects all firmware versions of Synaptics VFS75xx fingerprint sensors prior to the November 15, 2019 update.

4

What are the potential impacts of CVE-2019-18618?

The potential impacts of CVE-2019-18618 include unauthorized access to sensitive sensor data, leading to privacy violations.

5

Is CVE-2019-18618 being actively exploited?

As of the latest updates, there are no reports of active exploitation of CVE-2019-18618 in the wild, but it remains a serious concern.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203