Security Advisory

CVE-2019-18619

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-07-22 13:15:53
Last updated 2024-08-05 01:54:14
Assigner mitre
State PUBLISHED

Description

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.