CVE-2021-3675

synaTEE.signed.dll Out-Of-Bounds Heap Write

HIGH

7.1

CVSS Score

Published: June 16, 2022 at 04:15 PM UTC

Updated: June 17, 2026 at 04:05 AM UTC

1 product affected across 1 vendorFingerprint Driver

Using Synaptics Fingerprint Driver by Synaptics?

Get instant alerts when new vulnerabilities affect Synaptics Fingerprint Driver - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.1

Exploit prediction

EPSS 0.3%

Description

Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fingerprint Driver · Synaptics

95%

5.1.000.26 ≤ v < 5.1.340.265.1.xxx.26 ≤ v < xxx=3405.2.0000.26 ≤ v < 5.2.3541.265.2.200.26 ≤ v < 5.2.229.265.2.2xx.26 ≤ v < xx=295.2.300.26 ≤ v < 5.2.325.265.2.3xx.26 ≤ v < xx=255.2.xxxx.26 ≤ v < xxxx=35415.3.0000.26 ≤ v < 5.3.3543.265.3.xxxx.26 ≤ v < xxxx=35435.5.00.1058 ≤ v < 5.5.44.10585.5.00.1102 ≤ v < 5.5.34.11025.5.00.1116 ≤ v < 5.5.14.11165.5.xx.1058 ≤ v < xx=445.5.xx.1102 ≤ v < xx=345.5.xx.1116 ≤ v < xx=146.0.00.1111 ≤ v < 6.0.58.11116.0.xx.1104 ≤ v < xx=506.0.xx.1108 ≤ v < xx=316.0.xx.1111 ≤ v < xx=585.1.xxx.26 5.2.2xx.26 5.2.3xx.26 5.2.xxxx.26 5.3.xxxx.26 5.5.xx.1058 5.5.xx.1102 5.5.xx.1116 6.0.xx.1104 6.0.xx.1108 6.0.xx.1111

Affected range stops below 5.1.340.26, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.2.229.26, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.2.325.26, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.2.3541.26, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.3.3543.26, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.5.14.1116, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.5.34.1102, so it looks safe — our inference, not a vendor statement

Affected range stops below 5.5.44.1058, so it looks safe — our inference, not a vendor statement

Affected range stops below 6.0.58.1111, so it looks safe — our inference, not a vendor statement

Affected range stops below xx=14, so it looks safe — our inference, not a vendor statement

Affected range stops below xx=25, so it looks safe — our inference, not a vendor statement

Affected range stops below xx=29, so it looks safe — our inference, not a vendor statement

Affected range stops below xx=31, so it looks safe — our inference, not a vendor statement

Affected range stops below xx=34, so it looks safe — our inference, not a vendor statement

Affected range stops below xx=44, so it looks safe — our inference, not a vendor statement

Affected range stops below xx=50, so it looks safe — our inference, not a vendor statement

Affected range stops below xx=58, so it looks safe — our inference, not a vendor statement

Affected range stops below xxx=340, so it looks safe — our inference, not a vendor statement

Affected range stops below xxxx=3541, so it looks safe — our inference, not a vendor statement

Affected range stops below xxxx=3543, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

x_refsource_MISCPatchThird Party Advisory

Source: [email protected]

https://support.hp.com/us-en/document/ish_6411153-6411191-16/hpsbhf03797

x_refsource_MISCThird Party Advisory

Source: [email protected]

https://support.lenovo.com/us/en/product_security/LEN-68054

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

https://synaptics.com/sites/default/files/2022-06/fingerprint-driver-SGX-security-brief-2022-06-14.pdf

CVSS

7.1HIGH[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: NONE
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-20CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card