What’s Vulnerable › Vulnerabilities

CVE-2019-5049

• Severity: critical (CVSS 10.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-31 · updated 2026-06-17
• Weakness: CWE-787

Description

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

Affected products

• AMD Radeon 550 Firmware: 25.20.15031.5004, 25.20.15031.9002
• AMD Radeon Rx 550 Firmware: 25.20.15031.5004, 25.20.15031.9002
• AMD Radeon Rx 550X Firmware: 25.20.15031.5004, 25.20.15031.9002

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0818
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0818

Get alerted when CVE-2019-5049 or the next vulnerability affects your stack