CVE-2019-5049: AMD Radeon 550 Firmware

Critical severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days.

An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory write. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be triggered from VMware guest, affecting VMware host.

Affected products

• AMD Radeon 550 Firmware: version 25.20.15031.5004 only; version 25.20.15031.9002 only
• AMD Radeon Rx 550 Firmware: version 25.20.15031.5004 only; version 25.20.15031.9002 only
• AMD Radeon Rx 550x Firmware: version 25.20.15031.5004 only; version 25.20.15031.9002 only

Published 2019-10-31. Last modified 2026-06-17.