CVE-2019-5098
First published: Thu Dec 05 2019(Updated: )
An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.
Credit: talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Workstation | =15.0.0 | |
| Microsoft Windows 10 | ||
| Amd Radeon Rx 550 Firmware | =26.20.13001.29010 | |
| Amd Radeon Rx 550 | ||
| Amd Radeon 550 Firmware | =26.20.13001.29010 | |
| Amd Radeon 550 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-5098?
CVE-2019-5098 is an exploitable out-of-bounds read vulnerability in the AMD ATIDXX64.DLL driver.
How does CVE-2019-5098 impact VMware Workstation 15.0.0?
VMware Workstation 15.0.0 is affected by CVE-2019-5098 and can be exploited by a specially crafted shader file.
Is Microsoft Windows 10 vulnerable to CVE-2019-5098?
No, Microsoft Windows 10 is not vulnerable to CVE-2019-5098.
How can I fix CVE-2019-5098 in the AMD Radeon RX 550 firmware version 26.20.13001.29010?
To fix CVE-2019-5098 in the AMD Radeon RX 550 firmware version 26.20.13001.29010, update to the latest firmware version provided by AMD.
What is the severity rating of CVE-2019-5098?
CVE-2019-5098 has a severity rating of 8.6 (high).
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/description
- vendor/vmware
- canonical/vmware workstation
- version/vmware workstation/15.0.0
- vendor/microsoft
- canonical/microsoft windows 10
- vendor/amd
- canonical/amd radeon rx 550 firmware
- version/amd radeon rx 550 firmware/26.20.13001.29010
- canonical/amd radeon rx 550
- canonical/amd radeon 550 firmware
- version/amd radeon 550 firmware/26.20.13001.29010
- canonical/amd radeon 550