CVE-2019-5098

Name of the Vulnerable Software and Affected Versions AMD ATIDXX64.DLL driver version 26.20.13001.29010

Description An out-of-bounds read issue exists in the AMD ATIDXX64.DLL driver. It can be triggered by a specially crafted pixel shader, causing an out-of-bounds memory read. An attacker can exploit this by providing a specially crafted shader file. This issue can be triggered from a VMware guest, affecting the VMware host.

Recommendations For AMD ATIDXX64.DLL driver version 26.20.13001.29010, consider restricting the use of specially crafted pixel shaders until a patch is available. As a temporary workaround, avoid using the vulnerable driver with untrusted shader files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.