An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.1 | 6.7 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| Primary | 2.0 | 7.2 | HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| Hyperlink | Source | Resource |
|---|---|---|
| https://support.lenovo.com/us/en/product_security/len-30707 | psirt@lenovo.com | Vendor Advisory |
| https://www.synaptics.com/sites/default/files/audio-driver-security-brief-2020-06-09.pdf | psirt@lenovo.com | Vendor Advisory |