medium6.7
CVE-2020-8337
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on…
Impact
An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synaptics | Smart Audio Uwp | before 1.0.83.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.lenovo.com/us/en/product_security/len-30707
- https://www.synaptics.com/sites/default/files/audio-driver-security-brief-2020-06-09.pdf
- https://support.lenovo.com/us/en/product_security/len-30707
- https://www.synaptics.com/sites/default/files/audio-driver-security-brief-2020-06-09.pdf