VYPR

Synaptics Fingerprint Driver

by Synaptics

CVEs (2)

  • CVE-2021-3675MedJun 16, 2022
    risk 0.36cvss 5.5epss 0.00

    Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior…

  • CVE-2023-6482MedJan 27, 2024
    risk 0.34cvss 5.2epss 0.00

    Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the…