CVE-2019-5520: VMware Workstation Shader Bytecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

First published: Mon Apr 15 2019(Updated: )

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the parsing of shader bytecode. By manipulating a document's elements, an attacker can trigger a read past the end of an allocated array. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the hypervisor.

Credit: security@vmware.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/remedy
• agent/severity
• agent/last-modified-date
• agent/author
• agent/title
• agent/weakness
• agent/tags
• agent/description
• agent/event
• agent/first-publish-date
• collector/zdi-advisory
• source/ZDI
• alias/ZDI-19-369
• alias/ZDI-CAN-7195
• alias/CVE-2019-5520
• agent/software-canonical-lookup
• vendor/vmware
• canonical/vmware fusion
• version/vmware fusion/10.0.0
• version/vmware fusion/11.0.0
• canonical/vmware workstation
• version/vmware workstation/14.0.0
• version/vmware workstation/15.0.0
• canonical/vmware esxi
• version/vmware esxi/6.5
• version/vmware esxi/6.5-650-201701001
• version/vmware esxi/6.5-650-201703001
• version/vmware esxi/6.5-650-201703002
• version/vmware esxi/6.5-650-201704001
• version/vmware esxi/6.5-650-201707101
• version/vmware esxi/6.5-650-201707102
• version/vmware esxi/6.5-650-201707103
• version/vmware esxi/6.5-650-201707201
• version/vmware esxi/6.5-650-201707202
• version/vmware esxi/6.5-650-201707203
• version/vmware esxi/6.5-650-201707204
• version/vmware esxi/6.5-650-201707205
• version/vmware esxi/6.5-650-201707206
• version/vmware esxi/6.5-650-201707207
• version/vmware esxi/6.5-650-201707208
• version/vmware esxi/6.5-650-201707209
• version/vmware esxi/6.5-650-201707210
• version/vmware esxi/6.5-650-201707211
• version/vmware esxi/6.5-650-201707212
• version/vmware esxi/6.5-650-201707213
• version/vmware esxi/6.5-650-201707214
• version/vmware esxi/6.5-650-201707215
• version/vmware esxi/6.5-650-201707216
• version/vmware esxi/6.5-650-201707217
• version/vmware esxi/6.5-650-201707218
• version/vmware esxi/6.5-650-201707219
• version/vmware esxi/6.5-650-201707220
• version/vmware esxi/6.5-650-201707221
• version/vmware esxi/6.5-650-201710001
• version/vmware esxi/6.5-650-201712001
• version/vmware esxi/6.5-650-201803001
• version/vmware esxi/6.5-650-201806001
• version/vmware esxi/6.5-650-201808001
• version/vmware esxi/6.5-650-201810001
• version/vmware esxi/6.5-650-201810002
• version/vmware esxi/6.5-650-201811001
• version/vmware esxi/6.5-650-201811002
• version/vmware esxi/6.5-650-201811301
• version/vmware esxi/6.5-650-201901001
• version/vmware esxi/6.7
• version/vmware esxi/6.7-670-201806001
• version/vmware esxi/6.7-670-201807001
• version/vmware esxi/6.7-670-201808001
• version/vmware esxi/6.7-670-201810001
• version/vmware esxi/6.7-670-201810101
• version/vmware esxi/6.7-670-201810102
• version/vmware esxi/6.7-670-201810103
• version/vmware esxi/6.7-670-201810201
• version/vmware esxi/6.7-670-201810202
• version/vmware esxi/6.7-670-201810203
• version/vmware esxi/6.7-670-201810204
• version/vmware esxi/6.7-670-201810205
• version/vmware esxi/6.7-670-201810206
• version/vmware esxi/6.7-670-201810207
• version/vmware esxi/6.7-670-201810208
• version/vmware esxi/6.7-670-201810209
• version/vmware esxi/6.7-670-201810210
• version/vmware esxi/6.7-670-201810211
• version/vmware esxi/6.7-670-201810212
• version/vmware esxi/6.7-670-201810213
• version/vmware esxi/6.7-670-201810214
• version/vmware esxi/6.7-670-201810215
• version/vmware esxi/6.7-670-201810216
• version/vmware esxi/6.7-670-201810217
• version/vmware esxi/6.7-670-201810218
• version/vmware esxi/6.7-670-201810219
• version/vmware esxi/6.7-670-201810220
• version/vmware esxi/6.7-670-201810221
• version/vmware esxi/6.7-670-201810222
• version/vmware esxi/6.7-670-201810223
• version/vmware esxi/6.7-670-201810224
• version/vmware esxi/6.7-670-201810225
• version/vmware esxi/6.7-670-201810226
• version/vmware esxi/6.7-670-201810227
• version/vmware esxi/6.7-670-201810228
• version/vmware esxi/6.7-670-201810229
• version/vmware esxi/6.7-670-201810230
• version/vmware esxi/6.7-670-201810231
• version/vmware esxi/6.7-670-201810232
• version/vmware esxi/6.7-670-201810233
• version/vmware esxi/6.7-670-201810234
• version/vmware esxi/6.7-670-201811001
• version/vmware esxi/6.7-670-201901001
• version/vmware esxi/6.7-670-201901401
• version/vmware esxi/6.7-670-201901402
• version/vmware esxi/6.7-670-201901403
• version/vmware esxi/6.7-670-201904201
• version/vmware esxi/6.7-670-201904202
• version/vmware esxi/6.7-670-201904203
• version/vmware esxi/6.7-670-201904204
• version/vmware esxi/6.7-670-201904205
• version/vmware esxi/6.7-670-201904206
• version/vmware esxi/6.7-670-201904207
• version/vmware esxi/6.7-670-201904208
• version/vmware esxi/6.7-670-201904209
• version/vmware esxi/6.7-670-201904210
• version/vmware esxi/6.7-670-201904211
• version/vmware esxi/6.7-670-201904212
• version/vmware esxi/6.7-670-201904213
• version/vmware esxi/6.7-670-201904214
• version/vmware esxi/6.7-670-201904215
• version/vmware esxi/6.7-670-201904216
• version/vmware esxi/6.7-670-201904217
• version/vmware esxi/6.7-670-201904218
• version/vmware esxi/6.7-670-201904219
• version/vmware esxi/6.7-670-201904220
• version/vmware esxi/6.7-670-201904221
• version/vmware esxi/6.7-670-201904222
• version/vmware esxi/6.7-670-201904223
• version/vmware esxi/6.7-670-201904224
• version/vmware esxi/6.7-670-201904225
• version/vmware esxi/6.7-670-201904226
• version/vmware esxi/6.7-670-201904227
• version/vmware esxi/6.7-670-201904228
• version/vmware esxi/6.7-670-201904229