CVE-2019-5098 — Out-of-bounds Read in Vmware Workstation

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
8.6HIGHNVD
EPSS
0.6%
top 31.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
AMD Radeon 550 FirmwareAMD Radeon RX 550 FirmwareVmware Workstation
Timeline
PublishedDec 5
Latest updateMay 24

Description

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0

Affected Packages3 packages

▶NVDvmware/workstation15.0.0
▶NVDamd/radeon_550_firmware26.20.13001.29010
▶NVDamd/radeon_rx_550_firmware26.20.13001.29010

🔴Vulnerability Details

2
GHSA
GHSA-69g2-j5hm-jq2w: An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64↗2022-05-24
▶
CVEList
CVE-2019-5098: An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64↗2019-12-05
▶
CVE-2019-5098 — Out-of-bounds Read in Vmware | cvebase