What’s Vulnerable › Vulnerabilities

CVE-2019-5098

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-12-05 · updated 2026-06-17
• Weakness: CWE-125

Description

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

Affected products

• AMD Radeon 550 Firmware: 26.20.13001.29010
• AMD Radeon Rx 550 Firmware: 26.20.13001.29010
• VMware Workstation: 15.0.0
• AMD ATI: AMD ATIDXX64.DLL (26.20.13001.29010) running on Radeon RX 550 / 550 Series VMware Workstation 15 (15.1.0 build-13591040) with Windows 10 x64 as guestVM

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0890
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0890

Get alerted when CVE-2019-5098 or the next vulnerability affects your stack