AMD Radeon 550 Firmware vulnerabilities

2 CVEs affecting AMD Radeon 550 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5098, published 2019-12-05.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-5098, published 2019-12-05. High severity, CVSS 8.6. EPSS: 2% chance of exploitation in the next 30 days. An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can…
• CVE-2019-5049, published 2019-10-31. Critical severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days. An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002. A specially crafted pixel shader can cause an out-of-bounds memory…