CVE-2019-5183: Critical severity amd radeon directx 11 driver vulnerability

Published Jan 25, 2020

Updated

An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031.18002. A specially crafted pixel shader can cause a type confusion issue, leading to potential code execution. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

Affected Software

4 affected components

AMD ATIDXX64=26.20.13031.10003

AMD ATIDXX64=26.20.13031.15006

AMD ATIDXX64=26.20.13031.18002

VMware Workstation=15.0

Event History

Jan 25, 2020

CVE Published

via MITRE·05:59 PM

Data Sourced

via MITRE·05:59 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-5183?

CVE-2019-5183 is a type confusion vulnerability in the AMD ATIDXX64.DLL driver versions 26.20.13031.1…

How serious is CVE-2019-5183?

CVE-2019-5183 has a severity level of critical (9 out of 10).

How does CVE-2019-5183 work?

CVE-2019-5183 can be exploited by providing a specially crafted pixel shader, which can cause a type confusion issue and potentially lead to code execution.

Which versions of AMD ATIDXX64.DLL driver are affected by CVE-2019-5183?

The affected versions of AMD ATIDXX64.DLL driver are 26.20.13031.10003, 26.20.13031.15006, and 26.20.13031.18002.

Is VMware Workstation 15.0 affected by CVE-2019-5183?

No, VMware Workstation 15.0 is not affected by CVE-2019-5183.

How can I fix CVE-2019-5183?

To address CVE-2019-5183, it is recommended to update to a patched version of the AMD ATIDXX64.DLL driver.