Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vfs75xx_firmware | Synaptics | 5.1.5.51 (including) | 5.1.5.51 (including) |
| Vfs75xx_firmware | Synaptics | 5.1.337.26 (including) | 5.1.337.26 (including) |
| Vfs75xx_firmware | Synaptics | 5.1.3507.26 (including) | 5.1.3507.26 (including) |
| Vfs75xx_firmware | Synaptics | 5.2.320.26 (including) | 5.2.320.26 (including) |
| Vfs75xx_firmware | Synaptics | 5.2.524.26 (including) | 5.2.524.26 (including) |
| Vfs75xx_firmware | Synaptics | 5.2.3109.26 (including) | 5.2.3109.26 (including) |
| Vfs75xx_firmware | Synaptics | 5.2.3530.26 (including) | 5.2.3530.26 (including) |
| Vfs75xx_firmware | Synaptics | 5.2.5024.26 (including) | 5.2.5024.26 (including) |
| Vfs75xx_firmware | Synaptics | 5.3.3541.26 (including) | 5.3.3541.26 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.4.1116 (including) | 5.5.4.1116 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.8.1092 (including) | 5.5.8.1092 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.10.1100 (including) | 5.5.10.1100 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.10.1106 (including) | 5.5.10.1106 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.17.1099 (including) | 5.5.17.1099 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.17.1102 (including) | 5.5.17.1102 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.35.1058 (including) | 5.5.35.1058 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.502.79 (including) | 5.5.502.79 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.512.1051 (including) | 5.5.512.1051 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.2734.1050 (including) | 5.5.2734.1050 (including) |
| Vfs75xx_firmware | Synaptics | 5.5.2810.1050 (including) | 5.5.2810.1050 (including) |