CVE-2017-4899: VMware Workstation Player

Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days.

VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit this issue to crash the VM or trigger an out-of-bound read. Note: This issue can be triggered only when the host has no graphics card or no graphics drivers are installed.

Affected products

• VMware Workstation Player: version 12.0.0 only; version 12.0.1 only; version 12.1.0 only; version 12.5.0 only; version 12.5.1 only
• VMware Workstation Pro: version 12.0.0 only; version 12.0.1 only; version 12.1.0 only; version 12.5.0 only; version 12.5.1 only

Published 2017-06-07. Last modified 2026-06-17.