CVE-2018-15532

LOW

Synaptics Touchpad Driver < 2018-06-06 - Exposure of Sensitive Information via Freed Kernel Address

Title source: llm
STIX 2.1

Description

SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry x_refsource_misc
http://www.securityfocus.com/bid/106799
Third Party Advisory x_refsource_misc
https://support.lenovo.com/us/en/product_security/LEN-23156
Vendor Advisory x_refsource_misc
https://www.synaptics.com/products/touchpad-family

Scores

CVSS v3 3.8
EPSS 0.0043
EPSS Percentile 62.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
hp/synaptics_touchpad_driver < 2018-06-06
Published Mar 21, 2019
Tracked Since Feb 18, 2026