CyberSec.Space Logo
Back to CVE Browser

CVE-2019-5049

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1780%
EPSS Percentile43.18th
PublishedOct 31, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

Affected Platforms (CPE)

💻
Amd

Radeon Rx 550 Firmware

= 25.20.15031.5004
💻
Amd

Radeon Rx 550 Firmware

= 25.20.15031.9002
💻
Amd

Radeon 550 Firmware

= 25.20.15031.5004
💻
Amd

Radeon 550 Firmware

= 25.20.15031.9002
💻
Amd

Radeon Rx 550x Firmware

= 25.20.15031.5004
💻
Amd

Radeon Rx 550x Firmware

= 25.20.15031.9002

References & Advisories

🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0818
🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0818

Related Vulnerabilities

CVE-2019-760910.0

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with acce...

CVE-2019-420210.0

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted requ...

CVE-2019-1068610.0

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port ...

CVE-2019-917410.0

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1....