Skip to content
OpenAdvisories

Product · Synaptics

Synaptics Fingerprint Driver

4 known vulnerabilities.

4 results · Clear filters · Feed

  • Medium 6.6

    Co-Installer Privilege Escalation

    A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation.

  • Medium 5.5

    Use-After-Free in Service for Hardware Support App for Fingerprint Driver

    Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App.

  • Medium 5.2

    Encryption key derived from static host information

    Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical a…

  • Medium 5.5

    synaTEE.signed.dll Out-Of-Bounds Heap Write

    Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xx…