CVE-2019-18619: High severity synaptics vfs75xx firmware vulnerability

Published Jul 22, 2020
·
Updated

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.

Affected Software

240 affected components
Synaptics Vfs75xx Firmware=5.2.225.26
Synaptics Vfs75xx Firmware=5.2.318.26
Synaptics Vfs75xx Firmware=5.2.524.26
Synaptics Vfs75xx Firmware=5.2.3530.26
Synaptics Vfs75xx Firmware=5.3.3539.26
Synaptics Vfs75xx Firmware=5.5.3.1116
Synaptics Vfs75xx Firmware=5.5.8.1096
Synaptics Vfs75xx Firmware=5.5.10.1093
Synaptics Vfs75xx Firmware=5.5.11.1106
Synaptics Vfs75xx Firmware=5.5.15.1102
Synaptics Vfs75xx Firmware=5.5.38.1058
Synaptics Vfs75xx Firmware=5.5.2734.1050
Synaptics Vfs75xx Firmware=5.5.2811.1050
Synaptics Vfs75xx Firmware=5.6.23.1000
Synaptics Vfs75xx Firmware=6.0.14.1108
Synaptics Vfs75xx Firmware=6.0.32.1104
Synaptics Vfs75xx Firmware=6.0.42.1107
Synaptics VFS75xx
Lenovo Thinkpad 25 Firmware<5.2.3540.26
Lenovo Thinkpad 25
Lenovo Thankpad A475 Firmware<5.02.3539.0026
Lenovo Thankpad A475
Lenovo Thankpad A485 Firmware<5.03.3542.0026
Lenovo Thankpad A485
Lenovo Thinkpad E480 Firmware<5.2.321.26
Lenovo Thinkpad E480
Lenovo Thinkpad E580 Firmware<5.2.321.26
Lenovo Thinkpad E580
Lenovo Thinkpad E485 Firmware<5.2.321.26
Lenovo Thinkpad E485
Lenovo Thinkpad E585 Firmware<5.2.321.26
Lenovo Thinkpad E585
Lenovo Thinkpad E490s Firmware<5.2.321.26
Lenovo Thinkpad E490s
Lenovo Thinkpad S3 Firmware<5.2.321.26
Lenovo Thinkpad S3
Lenovo Thinkpad E490 Firmware<5.2.321.26
Lenovo Thinkpad E490
Lenovo Thinkpad E590 Firmware<5.2.321.26
Lenovo Thinkpad E590
Lenovo Thinkpad R490 Firmware<5.2.321.26
Lenovo Thinkpad R490
Lenovo Thinkpad R590 Firmware<5.2.321.26
Lenovo Thinkpad R590
Lenovo Thinkpad L480 Firmware<5.3.3542.26
Lenovo Thinkpad L480
Lenovo Thinkpad L580 Firmware<5.3.3542.26
Lenovo Thinkpad L580
Lenovo Thinkpad P1 Firmware<5.3.3542.26
Lenovo Thinkpad P1
Lenovo Thinkpad P1 Gen 2 Firmware<6.0.36.1105
Lenovo Thinkpad P1 Gen 2
Lenovo Thinkpad X1 Extreme 2nd Firmware<6.0.36.1105
Lenovo Thinkpad X1 Extreme 2nd
Lenovo Thinkpad P43s Firmware<6.0.36.1105
Lenovo Thinkpad P43s
Lenovo Thinkpad P50 Firmware<5.1.338.26
Lenovo Thinkpad P50
Lenovo Thinkpad P51 Firmware<5.2.3540.26
Lenovo Thinkpad P51
Lenovo Thinkpad P51s \(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad P51s \(20jx\)
Lenovo Thinkpad P51s \(20kx\) Firmware<5.2.3540.26
Lenovo Thinkpad P51s \(20kx\)
Lenovo Thinkpad P51s \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad P51s \(20hx\)
Lenovo Thinkpad P52 Firmware<5.2.3540.26
Lenovo Thinkpad P52
Lenovo Thinkpad P52s Firmware<5.3.3542.26
Lenovo Thinkpad P52s
Lenovo Thinkpad P53 Firmware<6.0.36.1105
Lenovo Thinkpad P53
Lenovo Thinkpad P53s Firmware<6.0.36.1105
Lenovo Thinkpad P53s
Lenovo Thinkpad P70 Firmware<5.1.338.26
Lenovo Thinkpad P70
Lenovo Thinkpad P71 \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad P71 \(20hx\)
Lenovo Thinkpad P72 Firmware<5.3.3542.26
Lenovo Thinkpad P72
Lenovo Thinkpad P73 Firmware<5.3.3542.26
Lenovo Thinkpad P73
Lenovo Thinkpad T25 \(20k7\) Firmware<5.2.3540.26
Lenovo Thinkpad T25 \(20k7\)
Lenovo Thinkpad T460p Firmware<5.1.338.26
Lenovo ThinkPad T460p
Lenovo Thinkpad T460s Firmware<5.1.338.26
Lenovo Thinkpad T460s
Lenovo Thinkpad T470 \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad T470 \(20hx\)
Lenovo Thinkpad T470 \(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad T470 \(20jx\)
Lenovo Thinkpad T470p Firmware<5.2.3540.26
Lenovo Thinkpad T470p
Lenovo Thinkpad T470s \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad T470s \(20hx\)
Lenovo Thinkpad T470s \(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad T470s \(20jx\)
Lenovo Thinkpad T480 Firmware<5.3.3542.26
Lenovo Thinkpad T480
Lenovo Thinkpad T480s Firmware<5.3.3542.26
Lenovo Thinkpad T480s
Lenovo Thinkpad T490 Firmware<6.0.36.1105
Lenovo Thinkpad T490
Lenovo Thinkpad T490s Firmware<6.0.36.1105
Lenovo Thinkpad T490s
Lenovo Thinkpad T570 \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad T570 \(20hx\)
Lenovo Thinkpad T570\(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad T570\(20jx\)
Lenovo Thinkpad T580 Firmware<5.3.3542.26
Lenovo Thinkpad T580
Lenovo Thinkpad T590 Firmware<6.0.36.1105
Lenovo Thinkpad T590
Lenovo Thinkpad X1 Carbon \(20hx\) Firmware<5.2.3540.26
Lenovo Thinkpad X1 Carbon \(20hx\)
Lenovo Thinkpad X1 Carbon \(20kx\) Firmware<5.3.3542.26
Lenovo Thinkpad X1 Carbon \(20kx\)
Lenovo Thinkpad X1 Carbon Firmware<5.1.338.26
Lenovo ThinkPad X1 Carbon
Lenovo Thinkpad X1 Yoga 4th Gen Firmware<5.1.338.26
Lenovo Thinkpad X1 Yoga 4th Gen
Lenovo Thinkpad X1 Extreme Firmware<5.3.3542.26
Lenovo Thinkpad X1 Extreme
Lenovo Thinkpad X1 Tablet Firmware<5.5.40.1058
Lenovo Thinkpad X1 Tablet
Lenovo Thinkpad X1 Tablet \(20jx\) Firmware<5.2.227.26
Lenovo Thinkpad X1 Tablet \(20jx\)
Lenovo Thinkpad X1 Yoga Firmware<5.1.338.26
Lenovo Thinkpad X1 Yoga
Lenovo Thinkpad X1 Yoga \(20jx\) Firmware<5.2.3540.26
Lenovo Thinkpad X1 Yoga \(20jx\)
Lenovo Thinkpad X1 Yoga 3rd Gen Firmware<5.3.3542.26
Lenovo Thinkpad X1 Yoga 3rd Gen
Lenovo Thinkpad X270 Firmware<5.2.3540.26
Lenovo Thinkpad X270
Lenovo Thinkpad X280 Firmware<5.3.3542.26
Lenovo Thinkpad X280
Lenovo Thinkpad X380 Yoga Firmware<5.3.3542.26
Lenovo Thinkpad X380 Yoga
Lenovo Thinkpad X390 Firmware<6.0.36.1105
Lenovo Thinkpad X390
Lenovo Thinkpad X390 Yoga Firmware<6.0.36.1105
Lenovo Thinkpad X390 Yoga
Lenovo Thinkpad Yoga 370 Firmware<5.2.3540.26
Lenovo Thinkpad Yoga 370
Lenovo Thinkpad S1 3rd Firmware<5.2.3540.26
Lenovo Thinkpad S1 3rd
Lenovo Thinkpad Yoga 260 Firmware<5.1.338.26
Lenovo Thinkpad Yoga 260
Lenovo Thinkpad Yoga S1 Firmware<5.1.338.26
Lenovo Thinkpad Yoga S1
Lenovo Thinkpad A275 Firmware<5.2.3535.26
Lenovo Thinkpad A275
HP Envy - 13t-ah100 Firmware<5.5.11.1093
HP Envy - 13t-ah100
HP Envy - 13t-aq100 Firmware<6.0.39.1111
HP Envy - 13t-aq100
HP Envy 13-ah0xxx Firmware<5.5.11.1093
HP Envy 13-ah0xxx
HP Envy 13-ah1xxx Firmware<5.5.11.1093
HP Envy 13-ah1xxx
HP Envy 13-aq0xxx Firmware<6.0.39.1111
HP Envy 13-aq0xxx
HP Envy 13-aq1xxx Firmware<6.0.39.1111
HP Envy 13-aq1xxx
HP Envy - 17t-bw000 Firmware<5.5.11.1093
HP Envy - 17t-bw000
HP Envy - 17t-ce000 Firmware<6.0.39.1111
HP Envy - 17t-ce000
HP Envy - 17t-ce100 Firmware<6.0.39.1111
HP Envy - 17t-ce100
HP Envy 17-bw0xxx Firmware<5.5.11.1093
HP Envy 17-bw0xxx
HP Envy 17-ce0xxx Firmware<6.0.39.1111
HP Envy 17-ce0xxx
HP Envy 17-ce1xxx Firmware<6.0.39.1111
HP Envy 17-ce1xxx
HP Envy 17m-bw0xxx Firmware<5.5.11.1093
HP Envy 17m-bw0xxx
HP Envy 17m-ce0xxx Firmware<6.0.39.1111
HP Envy 17m-ce0xxx
HP Envy 17m-ce1xxx Firmware<6.0.39.1111
HP Envy 17m-ce1xxx
HP Envy X360 - 15t-cn000 Firmware<5.5.11.1093
HP Envy X360 - 15t-cn000
HP Envy X360 - 15t-dr000 Firmware<6.0.39.1111
HP Envy X360 - 15t-dr000
HP Envy X360 - 15t-dr000 \(validity Fps\) Firmware<5.5.26.1102
HP Envy X360 - 15t-dr000 \(validity Fps\)
HP Envy X360 - 15t-dr100 Firmware<6.0.39.1111
HP Envy X360 - 15t-dr100
HP Envy X360 - 15t-dr100 \(validity Fps\) Firmware<5.5.26.1102
HP Envy X360 - 15t-dr100 \(validity Fps\)
HP Envy 15-cn0xxx X360 Firmware<5.5.11.1093
HP Envy 15-cn0xxx X360
HP Envy 15-cn1xxx X360 Firmware<5.5.11.1093
HP Envy 15-cn1xxx X360
HP Envy 15-dr0xxx X360 Firmware<6.0.39.1111
HP Envy 15-dr0xxx X360
HP Envy 15-dr0xxx X360 \(validity Fps\) Firmware<5.5.26.1102
HP Envy 15-dr0xxx X360 \(validity Fps\)
HP Envy 15-dr1xxx X360 Firmware<6.0.39.1111
HP Envy 15-dr1xxx X360
HP Envy 15-dr1xxx X360 \(validity Fps\) Firmware<5.5.26.1102
HP Envy 15-dr1xxx X360 \(validity Fps\)
HP Envy 15m-cn0xxx X360 Firmware<5.5.11.1093
HP Envy 15m-cn0xxx X360
HP Envy 15m-dr0xxx X360 Firmware<6.0.39.1111
HP Envy 15m-dr0xxx X360
HP Envy 15m-dr0xxx X360 \(validity Fps\) Firmware<5.5.26.1102
HP Envy 15m-dr0xxx X360 \(validity Fps\)
HP Envy 15m-dr1xxx X360 Firmware<6.0.39.1111
HP Envy 15m-dr1xxx X360
HP Envy 15m-dr1xxx X360 \(validity Fps\) Firmware<5.5.26.1102
HP Envy 15m-dr1xxx X360 \(validity Fps\)
HP Pavilion X360 - 14t-cd000 Firmware<5.5.11.1093
HP Pavilion X360 - 14t-cd000
HP Pavilion X360 - 15t-dq000 Firmware<5.5.8.1116
HP Pavilion X360 - 15t-dq000
HP Pavilion X360 - 15t-dq100 Firmware<5.5.8.1116
HP Pavilion X360 - 15t-dq100
HP Pavilion X360 14t-cd100 Firmware<5.5.11.1093
HP Pavilion X360 14t-cd100
HP Pavilion X360 14t-dh000 Firmware<5.5.8.1116
HP Pavilion X360 14t-dh000
HP Pavilion 14-cd1xxx X360 Firmware<5.5.11.1093
HP Pavilion 14-cd1xxx X360
HP Pavilion 14-cd2xxx X360 Firmware<5.5.11.1093
HP Pavilion 14-cd2xxx X360
HP Pavilion 14-dh0xxx X360 Firmware<5.5.8.1116
HP Pavilion 14-dh0xxx X360
HP Pavilion 14m-cd0xxx X360 Firmware<5.5.11.1093
HP Pavilion 14m-cd0xxx X360
HP Pavilion 14m-dh0xxx X360 Firmware<5.5.8.1116
HP Pavilion 14m-dh0xxx X360
HP Pavilion 15 Firmware<5.5.8.1116
HP Pavilion 15
HP Spectre X360 Firmware<5.5.26.1102
HP Spectre X360

Remediation

Patch Available

https://support.hp.com/hk-en/document/c06696568

Patch Available

https://support.lenovo.com/us/en/product_security/LEN-31372

Event History

Jul 22, 2020
CVE Published
via MITRE·01:15 PM
Data Sourced
via MITRE·01:15 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2019-18619?

CVE-2019-18619 is classified as a high severity vulnerability due to its potential to allow the execution of arbitrary code within an SGX enclave.

2

How do I fix CVE-2019-18619?

To remediate CVE-2019-18619, update all affected Synaptics WBF drivers to versions released after November 15, 2019.

3

What causes CVE-2019-18619?

CVE-2019-18619 is caused by incorrect parameter validation in the synaTee component of Synaptics WBF drivers.

4

Who is affected by CVE-2019-18619?

CVE-2019-18619 affects local users utilizing vulnerable versions of Synaptics WBF drivers that utilize an SGX enclave.

5

What type of vulnerability is CVE-2019-18619?

CVE-2019-18619 is a local privilege escalation vulnerability that allows unauthorized code execution.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203