CVE-2019-5098

HIGH

AMD ATIDXX64.DLL <26.20.13001.29010 - Memory Corruption

Title source: llm
STIX 2.1

Description

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0890

Scores

CVSS v3 8.6
EPSS 0.0057
EPSS Percentile 68.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Details

CWE
CWE-125
Status published
Products (3)
amd/radeon_550_firmware 26.20.13001.29010
amd/radeon_rx_550_firmware 26.20.13001.29010
vmware/workstation 15.0.0
Published Dec 05, 2019
Tracked Since Feb 18, 2026