CVE-2019-5520: VMware Workstation Shader Bytecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the parsing of shader bytecode. By manipulating a document's elements, an attacker can trigger a read past the end of an allocated array. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the hypervisor.
Other sources
VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates address an out-of-bounds read vulnerability. Exploitation of this issue requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of this issue may lead to information disclosure.The workaround for this issue involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-5520?
CVE-2019-5520 has been rated as a medium severity vulnerability.
How do I fix CVE-2019-5520?
To fix CVE-2019-5520, upgrade to the latest version of VMware Workstation or VMware Fusion that addresses this vulnerability.
What type of vulnerability is CVE-2019-5520?
CVE-2019-5520 is a local information disclosure vulnerability.
What products are affected by CVE-2019-5520?
CVE-2019-5520 affects VMware Workstation and VMware Fusion versions listed in its advisory.
Who can exploit CVE-2019-5520?
Local attackers with low-privileged code execution rights on the guest system can exploit CVE-2019-5520.