Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-07-22T13:21:29

Updated: 2024-08-05T01:54:14.531Z

Reserved: 2019-10-29T00:00:00

Link: CVE-2019-18618

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2020-07-22T14:15:14.737

Modified: 2020-07-30T19:26:59.267

Link: CVE-2019-18618

cve-icon Redhat

No data.