critical10.0
CVE-2019-5049
An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002.
Impact
An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Radeon Rx 550 Firmware | Versions 25.20.15031.5004, 25.20.15031.9002 |
| Amd | Radeon 550 Firmware | Versions 25.20.15031.5004, 25.20.15031.9002 |
| Amd | Radeon Rx 550x Firmware | Versions 25.20.15031.5004, 25.20.15031.9002 |