CVE-2023-5447

Use-After-Free in Service for Hardware Support App for Fingerprint Driver

State: Published
Severity: 5.5 Medium
Published: May 11, 2024
Updated: Aug 2, 2024
Reserved: Oct 6, 2023

Description

Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	Synaptics

Weaknesses

CWE-414 Missing Lock Check
CWE-416 Use After Free

Affected Products

Product	Versions
Synaptics Fingerprint DriverSynaptics	6.0.0.1105 to before 6.0.64.1105Affected 6.0.0.1136 to before 6.0.39.1136Affected

References

https://www.synaptics.com/sites/default/files/2023-10/fingerprint-driver-HSAService-security-brief-2023-10-13.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.