CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2019-5049

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1780%
EPSS Percentile43.18th
Published2019年10月31日
Last Modified2024年11月21日

Vulnerability Description

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

Affected Platforms (CPE)

💻
Amd

Radeon Rx 550 Firmware

= 25.20.15031.5004
💻
Amd

Radeon Rx 550 Firmware

= 25.20.15031.9002
💻
Amd

Radeon 550 Firmware

= 25.20.15031.5004
💻
Amd

Radeon 550 Firmware

= 25.20.15031.9002
💻
Amd

Radeon Rx 550x Firmware

= 25.20.15031.5004
💻
Amd

Radeon Rx 550x Firmware

= 25.20.15031.9002

References & Advisories

🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0818
🔗 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0818

相關漏洞威脅

CVE-2019-002210.0

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full contro...

CVE-2019-623510.0

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12...

CVE-2019-002010.0

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full contr...

CVE-2019-1215310.0

Lack of validation in the HTML parser in RealObjects PDFreactor before 10.1.10722 leads to SSRF, allowing attackers to access netw...