PT-2023-31182 · Synaptics · Displaylink Usb Graphics Software For Windows+2

Published 2023-10-11 · Updated 2025-12-17 · CVE-2023-4936

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue allows for the sideloading of a compromised DLL during installation at elevated privilege.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Improper Privilege Management

Weakness Enumeration

CWE-427

CWE-269

Related Identifiers

CVE-2023-4936

Affected Products

Displaylink Usb Graphics Software For Windows

Displaylink

Displaylink Usb Graphics

References · 7

• https://osv.dev/vulnerability/CVE-2023-4936 · Vendor Advisory
• https://synaptics.com/sites/default/files/nr-154525-tc-synaptics_displaylink_windows_driver_security_brief_-_oct2023.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4936 · Security Note
• https://synaptics.com/products/displaylink-graphics/downloads/windows · Note
• https://t.me/cibsecurity/72124 · Telegram Post
• https://synaptics.com · Note
• https://t.me/cveNotify/146090 · Telegram Post