CVE-2019-5147

Name of the Vulnerable Software and Affected Versions AMD ATIDXX64.DLL driver version 26.20.13003.1007

Description An out-of-bounds read issue exists in the AMD ATIDXX64.DLL driver. This can be triggered by a specially crafted pixel shader, potentially causing a denial of service. An attacker can exploit this by providing a specially crafted shader file. Notably, this issue can be triggered from a VMware guest, affecting the VMware host.

Recommendations For version 26.20.13003.1007, consider avoiding the use of specially crafted pixel shaders until a patch is available. As a temporary workaround, restrict the use of shader files from untrusted sources to minimize the risk of exploitation.