CVE-2019-5049

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

Score

CVSS 3.1 10.0 Critical

Status

Modified - talos-cna@cisco.com

Published

2019-10-31

Last modified

2024-08-04

Weaknesses

CWE-787

Affected products

• Radeon 550 Firmware (Amd)
• Radeon Rx 550 Firmware (Amd)
• Radeon Rx 550x Firmware (Amd)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0818