Vulnerability Spotlight: AMD ATI Radeon ATIDXX64.DLL shader functionality remote code execution vulnerability
Summary: Cisco Talos discovered a remote code execution vulnerability in AMD's ATIDXX64.DLL driver, affecting versions 25.20.15031.5004 and 25.20.15031.9002 on the Radeon RX 550 and 550 Series running VMware Workstation 15. A specially crafted pixel shader supplied from inside a VMware guest can cause an out-of-bounds memory write, potentially allowing code execution on the associated VMware host.
Key Takeaway: The trigger sits in a guest VM, so a compromised or malicious guest workload can reach the driver and potentially the host underneath it - the boundary many teams treat as their strongest isolation.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026