CVE-2019-5146

Name of the Vulnerable Software and Affected Versions AMD ATIDXX64.DLL driver version 26.20.13025.10004

Description An out-of-bounds read issue exists in the AMD ATIDXX64.DLL driver. This can be triggered by a specially crafted pixel shader, potentially causing a denial of service. An attacker can exploit this by providing a specially crafted shader file. The issue can be triggered from a VMware guest, affecting the VMware host.

Recommendations For AMD ATIDXX64.DLL driver version 26.20.13025.10004, consider avoiding the use of specially crafted pixel shaders until a patch is available. As a temporary workaround, restrict the use of shader files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.