CVE-2019-18619

mediumpriority · track · 31EPSS 0.005 · 44 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.52% (44th) EPSS

CVSS 4.6 · medium

Is it mine?

129 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.6–7.8

v2.04.6mediumAV:L/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 3.9 · impact 6.4

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-763USprimary

affected products (129)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
hp envy - 13t-ah100 firmware< 5.5.11.1093nvdUScpe:2.3:o:hp:envy_-_13t-ah100_firmware:*:*:*:*:*:*:*:*
hp envy - 13t-aq100 firmware< 6.0.39.1111nvdUScpe:2.3:o:hp:envy_-_13t-aq100_firmware:*:*:*:*:*:*:*:*
hp envy - 17t-bw000 firmware< 5.5.11.1093nvdUScpe:2.3:o:hp:envy_-_17t-bw000_firmware:*:*:*:*:*:*:*:*
hp envy - 17t-ce000 firmware< 6.0.39.1111nvdUScpe:2.3:o:hp:envy_-_17t-ce000_firmware:*:*:*:*:*:*:*:*
hp envy - 17t-ce100 firmware< 6.0.39.1111nvdUScpe:2.3:o:hp:envy_-_17t-ce100_firmware:*:*:*:*:*:*:*:*
hp envy 13-ah0xxx firmware< 5.5.11.1093nvdUScpe:2.3:o:hp:envy_13-ah0xxx_firmware:*:*:*:*:*:*:*:*
hp envy 13-ah1xxx firmware< 5.5.11.1093nvdUScpe:2.3:o:hp:envy_13-ah1xxx_firmware:*:*:*:*:*:*:*:*
hp envy 13-aq0xxx firmware< 6.0.39.1111nvdUScpe:2.3:o:hp:envy_13-aq0xxx_firmware:*:*:*:*:*:*:*:*
hp envy 13-aq1xxx firmware< 6.0.39.1111nvdUScpe:2.3:o:hp:envy_13-aq1xxx_firmware:*:*:*:*:*:*:*:*
hp envy 15-cn0xxx x360 firmware< 5.5.11.1093nvdUScpe:2.3:o:hp:envy_15-cn0xxx_x360_firmware:*:*:*:*:*:*:*:*
hp envy 15-cn1xxx x360 firmware< 5.5.11.1093nvdUScpe:2.3:o:hp:envy_15-cn1xxx_x360_firmware:*:*:*:*:*:*:*:*
hp envy 15-dr0xxx x360 (validity fps) firmware< 5.5.26.1102nvdUScpe:2.3:o:hp:envy_15-dr0xxx_x360_\(validity_fps\)_firmware:*:*:*:*:*:*:*:*
hp envy 15-dr0xxx x360 firmware< 6.0.39.1111nvdUScpe:2.3:o:hp:envy_15-dr0xxx_x360_firmware:*:*:*:*:*:*:*:*
hp envy 15-dr1xxx x360 (validity fps) firmware< 5.5.26.1102nvdUScpe:2.3:o:hp:envy_15-dr1xxx_x360_\(validity_fps\)_firmware:*:*:*:*:*:*:*:*
hp envy 15-dr1xxx x360 firmware< 6.0.39.1111nvdUScpe:2.3:o:hp:envy_15-dr1xxx_x360_firmware:*:*:*:*:*:*:*:*
hp envy 15m-cn0xxx x360 firmware< 5.5.11.1093nvdUScpe:2.3:o:hp:envy_15m-cn0xxx_x360_firmware:*:*:*:*:*:*:*:*
hp envy 15m-dr0xxx x360 (validity fps) firmware< 5.5.26.1102nvdUScpe:2.3:o:hp:envy_15m-dr0xxx_x360_\(validity_fps\)_firmware:*:*:*:*:*:*:*:*
hp envy 15m-dr0xxx x360 firmware< 6.0.39.1111nvdUScpe:2.3:o:hp:envy_15m-dr0xxx_x360_firmware:*:*:*:*:*:*:*:*
hp envy 15m-dr1xxx x360 (validity fps) firmware< 5.5.26.1102nvdUScpe:2.3:o:hp:envy_15m-dr1xxx_x360_\(validity_fps\)_firmware:*:*:*:*:*:*:*:*

showing 20 of 129

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2020-07-22modified 2026-06-17

related (171)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2013-4695US	high7.8	5.28% (93rd)	Exploit	2019-12-27
Winamp 5.63: Invalid Pointer Dereference leading to Arbitrary Code Execution
CVE-2022-23222US	high7.8	1.92% (80th)	Exploit	2022-01-14
kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer type…
CVE-2021-41073US	high7.8	1.77% (78th)	Exploit	2021-09-19
loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer,…
CVE-2026-31787US	high7.8	0.18% (8th)	Exploit	2026-04-30
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but neither .may…
CVE-2023-34312US	high7.8	0.60% (48th)	Exploit	2023-06-01
In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a wri…

+166 more

references (17)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan