CWE
787
Advisory Published
Updated

CVE-2019-5049

First published: Thu Oct 31 2019(Updated: )

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

Credit: talos-cna@cisco.com

Affected SoftwareAffected VersionHow to fix
Amd Radeon Rx 550 Firmware=25.20.15031.5004
Amd Radeon Rx 550 Firmware=25.20.15031.9002
Amd Radeon Rx 550
Amd Radeon 550 Firmware=25.20.15031.5004
Amd Radeon 550 Firmware=25.20.15031.9002
Amd Radeon 550
Amd Radeon Rx 550x Firmware=25.20.15031.5004
Amd Radeon Rx 550x Firmware=25.20.15031.9002
Amd Radeon Rx 550x

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2019-5049?

    CVE-2019-5049 is a memory corruption vulnerability in the AMD ATIDXX64.DLL driver.

  • How does CVE-2019-5049 work?

    CVE-2019-5049 can be exploited by providing a specially crafted pixel shader file, which can cause an out-of-bounds memory write.

  • What is the severity of CVE-2019-5049?

    CVE-2019-5049 has a severity rating of 10, which is considered critical.

  • Which software versions are affected by CVE-2019-5049?

    The affected software versions are 25.20.15031.5004 and 25.20.15031.9002 of the AMD ATIDXX64.DLL driver.

  • How can CVE-2019-5049 be fixed?

    To fix CVE-2019-5049, users should update their AMD ATIDXX64.DLL driver to a patched version provided by AMD.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203