CVE-2019-18618: HP Elite Slice Firmware

Medium severity, CVSS 6.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.

Affected products

• HP Elite Slice Firmware: before 5.2.3110.26 (fixed in 5.2.3110.26)
• HP Elite x2 1012 g2 Firmware: before 5.2.5026.26 (fixed in 5.2.5026.26)
• HP Elite x2 1013 g3 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elite x2 g4 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 1040 g4 Firmware: before 5.2.5026.26 (fixed in 5.2.5026.26)
• HP Elitebook 1050 g1 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 735 g5 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 735 g6 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 745 g5 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 745 g6 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 755 g5 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 830 g5 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 830 g6 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 836 g5 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 836 g6 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 840 g5 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 840 g5 Healthcare Edition Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 840 g6 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 840 g6 Healthcare Edition Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 846 g5 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 846 g5 Healthcare Edition Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 846 g6 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 846 g6 Healthcare Edition Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 850 g5 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• HP Elitebook 850 g6 Firmware: before 5.5.21.1099 (fixed in 5.5.21.1099)
• and 108 more

Published 2020-07-22. Last modified 2026-06-17.