Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Synaptics WBF驱动程序安全漏洞
Vulnerability Description
Synaptics WBF Driver是美国Synaptics公司的一款指纹读取驱动程序。 Synaptics WBF驱动程序（使用SGX安全区）（2019-11-15之前的所有版本））中的synaTee组件中存在安全漏洞，该漏洞源于程序未正确验证参数。本地攻击者可借助API（接收无效指针）利用该漏洞在安全区中执行任意代码，影响安全区数据的保密性 。
CVSS Information
N/A
Vulnerability Type
N/A