CVE-2019-5183
CRITICALAMD ATIDXX64.DLL <26.20.13031.10003-26.20.13031.18002 - RCE
Title source: llmDescription
An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002. A specially crafted pixel shader can cause a type confusion issue, leading to potential code execution. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0964
Scores
CVSS v3
9.0
EPSS
0.0048
EPSS Percentile
65.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-843
Status
published
Products (3)
amd/atidxx64
26.20.13031.10003
amd/atidxx64
26.20.13031.15006
amd/atidxx64
26.20.13031.18002
Published
Jan 25, 2020
Tracked Since
Feb 18, 2026