Vulnerabilities > Lenovo > Thinkpad X380 Yoga Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2020-07-22 CVE-2019-18619 Release of Invalid Pointer or Reference vulnerability in multiple products
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.
local
low complexity
synaptics lenovo hp CWE-763
7.8