Vulnerability Spotlight: AMD ATI Radeon ATIDXX64.DLL shader functionality sincos denial-of-service vulnerability
Summary: Piotr Bania of Cisco Talos discovered a denial-of-service vulnerability in the ATIDXX64.DLL driver, version 26.20.13001.29010, in the AMD ATI Radeon line of video cards, triggered by supplying a malformed pixel shader. The out-of-bounds memory read can be triggered from VMware guest usermode against the vmware-vmx.exe process on the host, or theoretically through WebGL, and Cisco Talos worked with AMD to resolve the issue and release an update.
Key Takeaway: A crafted shader running inside a VMware guest can reach out-of-bounds memory in the host's vmware-vmx.exe process, so the boundary between guest and host is the stake here.
Read the original at Cisco Talos ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026