PT-2019-4640 · Synaptics · Synaptics Touchpad

Published 2019-03-17 · Updated 2019-03-27 · CVE-2018-15532

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Synaptics Touchpad drivers versions prior to 2018-06-06

Description The issue is related to errors in processing API requests in the SynTP.sys driver for Synaptics Touchpad. It allows local users to obtain sensitive information about freed kernel addresses, potentially enabling unauthorized access to protected information.

Recommendations For versions prior to 2018-06-06, update the Synaptics Touchpad drivers to a version released after 2018-06-06 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2020-00802

CVE-2018-15532

Affected Products

Synaptics Touchpad

References · 9

• https://synaptics.com/products/touchpad-family · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15532 · Security Note
• https://bdu.fstec.ru/vul/2020-00802 · Security Note
• https://synaptics.com/sites/default/files/touchpad-driver-security-brief-20190124.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-15532 · Vendor Advisory
• https://securityfocus.com/bid/106799 · Note
• http://securityfocus.com/bid/106799 · Note
• https://support.lenovo.com/us/en/product_security/LEN-23156 · Note
• https://support.hp.com/us-en/document/c06220540 · Note