CVE-2019-5049
CRITICALAMD ATIDXX64.DLL <25.20.15031.5004-25.20.15031.9002 - Memory Corrup...
Title source: llmDescription
An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0818
Scores
CVSS v3
10.0
EPSS
0.0042
EPSS Percentile
62.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (6)
amd/radeon_550_firmware
25.20.15031.5004
amd/radeon_550_firmware
25.20.15031.9002
amd/radeon_rx_550_firmware
25.20.15031.5004
amd/radeon_rx_550_firmware
25.20.15031.9002
amd/radeon_rx_550x_firmware
25.20.15031.5004
amd/radeon_rx_550x_firmware
25.20.15031.9002
Published
Oct 31, 2019
Tracked Since
Feb 18, 2026