{"id":"CVE-2019-18618","aliases":["EUVD-2019-8345","GHSA-p92m-c9r4-7vc4"],"status":"published","title":"Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that...","description":"Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00572,"percentile":0.47584,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2020-07-22T13:21:29Z","modified":"2026-06-17T02:25:10Z","products":[{"vendor":"hp","product":"elite_slice_firmware"},{"vendor":"hp","product":"elite_x2_1012_g2_firmware"},{"vendor":"hp","product":"elite_x2_1013_g3_firmware"},{"vendor":"hp","product":"elite_x2_g4_firmware"},{"vendor":"hp","product":"elitebook_1040_g4_firmware"},{"vendor":"hp","product":"elitebook_1050_g1_firmware"},{"vendor":"hp","product":"elitebook_735_g5_firmware"},{"vendor":"hp","product":"elitebook_735_g6_firmware"},{"vendor":"hp","product":"elitebook_745_g5_firmware"},{"vendor":"hp","product":"elitebook_745_g6_firmware"},{"vendor":"hp","product":"elitebook_755_g5_firmware"},{"vendor":"hp","product":"elitebook_830_g5_firmware"},{"vendor":"hp","product":"elitebook_830_g6_firmware"},{"vendor":"hp","product":"elitebook_836_g5_firmware"},{"vendor":"hp","product":"elitebook_836_g6_firmware"},{"vendor":"hp","product":"elitebook_840_g5_firmware"},{"vendor":"hp","product":"elitebook_840_g5_healthcare_edition_firmware"},{"vendor":"hp","product":"elitebook_840_g6_firmware"},{"vendor":"hp","product":"elitebook_840_g6_healthcare_edition_firmware"},{"vendor":"hp","product":"elitebook_846_g5_firmware"},{"vendor":"hp","product":"elitebook_846_g5_healthcare_edition_firmware"},{"vendor":"hp","product":"elitebook_846_g6_firmware"},{"vendor":"hp","product":"elitebook_846_g6_healthcare_edition_firmware"},{"vendor":"hp","product":"elitebook_850_g5_firmware"},{"vendor":"hp","product":"elitebook_850_g6_firmware"},{"vendor":"hp","product":"elitebook_x360_1020_g2_firmware"},{"vendor":"hp","product":"elitebook_x360_1030_g2_firmware"},{"vendor":"hp","product":"elitebook_x360_1030_g3_firmware"},{"vendor":"hp","product":"elitebook_x360_1030_g4_firmware"},{"vendor":"hp","product":"elitebook_x360_1040_g5_firmware"},{"vendor":"hp","product":"elitebook_x360_1040_g6_firmware"},{"vendor":"hp","product":"elitebook_x360_830_g5_firmware"},{"vendor":"hp","product":"elitebook_x360_830_g6_firmware"},{"vendor":"hp","product":"eliteone_1000_g1_firmware"},{"vendor":"hp","product":"eliteone_1000_g2_firmware"},{"vendor":"hp","product":"envy_x360_firmware"},{"vendor":"hp","product":"mt44_firmware"},{"vendor":"hp","product":"mt45_firmware"},{"vendor":"hp","product":"pavilion_x360_firmware"},{"vendor":"hp","product":"pro_x2_612_g2_firmware"},{"vendor":"hp","product":"probook_430_g6_firmware"},{"vendor":"hp","product":"probook_440_g6_firmware"},{"vendor":"hp","product":"probook_445_g6_firmware"},{"vendor":"hp","product":"probook_445r_g6_firmware"},{"vendor":"hp","product":"probook_450_g6_firmware"},{"vendor":"hp","product":"probook_455_g6_firmware"},{"vendor":"hp","product":"probook_455r_g6_firmware"},{"vendor":"hp","product":"probook_640_g5_firmware"},{"vendor":"hp","product":"probook_650_g5_firmware"},{"vendor":"hp","product":"spectre_x360_firmware"},{"vendor":"hp","product":"zbook_14u_g5_firmware"},{"vendor":"hp","product":"zbook_14u_g6_firmware"},{"vendor":"hp","product":"zbook_15_g5_firmware"},{"vendor":"hp","product":"zbook_15_g6_firmware"},{"vendor":"hp","product":"zbook_15u_g5_firmware"},{"vendor":"hp","product":"zbook_15u_g6_firmware"},{"vendor":"hp","product":"zbook_17_g5_firmware"},{"vendor":"hp","product":"zbook_17_g6_firmware"},{"vendor":"hp","product":"zbook_studio_g5_firmware"},{"vendor":"hp","product":"zbook_studio_x360_g5_firmware"},{"vendor":"hp","product":"zhan_66_pro_13_g2_firmware"},{"vendor":"hp","product":"zhan_66_pro_14_g2_firmware"},{"vendor":"hp","product":"zhan_66_pro_15_g2_firmware"},{"vendor":"hp","product":"zhan_x_13_g2_firmware"},{"vendor":"lenovo","product":"thankpad_a475_firmware"},{"vendor":"lenovo","product":"thankpad_a485_firmware"},{"vendor":"lenovo","product":"thinkpad_25_firmware"},{"vendor":"lenovo","product":"thinkpad_a275_firmware"},{"vendor":"lenovo","product":"thinkpad_e480_firmware"},{"vendor":"lenovo","product":"thinkpad_e485_firmware"},{"vendor":"lenovo","product":"thinkpad_e490_firmware"},{"vendor":"lenovo","product":"thinkpad_e490s_firmware"},{"vendor":"lenovo","product":"thinkpad_e580_firmware"},{"vendor":"lenovo","product":"thinkpad_e585_firmware"},{"vendor":"lenovo","product":"thinkpad_e590_firmware"},{"vendor":"lenovo","product":"thinkpad_l480_firmware"},{"vendor":"lenovo","product":"thinkpad_l580_firmware"},{"vendor":"lenovo","product":"thinkpad_p1_firmware"},{"vendor":"lenovo","product":"thinkpad_p1_gen_2_firmware"},{"vendor":"lenovo","product":"thinkpad_p43s_firmware"},{"vendor":"lenovo","product":"thinkpad_p50_firmware"},{"vendor":"lenovo","product":"thinkpad_p51_firmware"},{"vendor":"lenovo","product":"thinkpad_p51s_\\(20hx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_p51s_\\(20jx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_p51s_\\(20kx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_p52_firmware"},{"vendor":"lenovo","product":"thinkpad_p52s_firmware"},{"vendor":"lenovo","product":"thinkpad_p53_firmware"},{"vendor":"lenovo","product":"thinkpad_p53s_firmware"},{"vendor":"lenovo","product":"thinkpad_p70_firmware"},{"vendor":"lenovo","product":"thinkpad_p71_\\(20hx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_p72_firmware"},{"vendor":"lenovo","product":"thinkpad_p73_firmware"},{"vendor":"lenovo","product":"thinkpad_r490_firmware"},{"vendor":"lenovo","product":"thinkpad_r590_firmware"},{"vendor":"lenovo","product":"thinkpad_s1_3rd_firmware"},{"vendor":"lenovo","product":"thinkpad_s3_firmware"},{"vendor":"lenovo","product":"thinkpad_t25_\\(20k7\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_t460p_firmware"},{"vendor":"lenovo","product":"thinkpad_t460s_firmware"},{"vendor":"lenovo","product":"thinkpad_t470_\\(20hx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_t470_\\(20jx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_t470p_firmware"},{"vendor":"lenovo","product":"thinkpad_t470s_\\(20hx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_t470s_\\(20jx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_t480_firmware"},{"vendor":"lenovo","product":"thinkpad_t480s_firmware"},{"vendor":"lenovo","product":"thinkpad_t490_firmware"},{"vendor":"lenovo","product":"thinkpad_t490s_firmware"},{"vendor":"lenovo","product":"thinkpad_t570\\(20jx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_t570_\\(20hx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_t580_firmware"},{"vendor":"lenovo","product":"thinkpad_t590_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_carbon_\\(20hx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_carbon_\\(20kx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_carbon_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_extreme_2nd_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_extreme_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_tablet_\\(20jx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_tablet_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_yoga_3rd_gen_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_yoga_4th_gen_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_yoga_\\(20jx\\)_firmware"},{"vendor":"lenovo","product":"thinkpad_x1_yoga_firmware"},{"vendor":"lenovo","product":"thinkpad_x270_firmware"},{"vendor":"lenovo","product":"thinkpad_x280_firmware"},{"vendor":"lenovo","product":"thinkpad_x380_yoga_firmware"},{"vendor":"lenovo","product":"thinkpad_x390_firmware"},{"vendor":"lenovo","product":"thinkpad_x390_yoga_firmware"},{"vendor":"lenovo","product":"thinkpad_yoga_260_firmware"},{"vendor":"lenovo","product":"thinkpad_yoga_370_firmware"},{"vendor":"lenovo","product":"thinkpad_yoga_s1_firmware"},{"vendor":"synaptics","product":"vfs75xx_firmware"}],"references":[{"url":"https://www.synaptics.com/company/blog/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.lenovo.com/us/en/product_security/LEN-31372","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory"]},{"url":"https://www.synaptics.com/sites/default/files/fingerprint-sensor-VFS7500-security-brief-2020-07-14.pdf","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://support.hp.com/us-en/document/c06696474","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18618"},{"url":"https://github.com/advisories/GHSA-p92m-c9r4-7vc4"}],"sources":{"cve":[{"id":"CVE-2019-18618","description":"Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.","status":"published","published":"2020-07-22T13:21:29Z","modified":"2024-08-05T01:54:14.531Z","updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8345","description":"Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.","status":"published","published":"2020-07-22T13:21:29Z","modified":"2024-08-05T01:54:14Z","updated_at":"2026-11-03T02:40:27.733219Z"}],"ghsa":[{"id":"GHSA-p92m-c9r4-7vc4","title":"Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that...","description":"Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.","status":"published","published":"2022-05-24T17:24:01Z","modified":"2023-01-29T05:03:34Z","updated_at":"2026-11-02T14:45:20.937669Z"}],"nvd":[{"id":"CVE-2019-18618","description":"Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.","status":"published","published":"2020-07-22T14:15:14.737Z","modified":"2026-06-17T02:25:10.06Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:05:47.558959Z"}]}}