AMD Graphics Driver 26.20.15019.19000 Pixel Shader rdvgm.exe out-of-bounds write

Summaryinfo

A vulnerability identified as critical has been detected in AMD Graphics Driver 26.20.15019.19000. Affected is an unknown function in the library atidxx64.dll of the file rdvgm.exe of the component Pixel Shader. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2020-6100. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in AMD Graphics Driver 26.20.15019.19000 (Hardware Driver Software). It has been declared as critical. Affected by this vulnerability is some unknown functionality in the library atidxx64.dll of the file rdvgm.exe of the component Pixel Shader. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. The CWE definition for the vulnerability is CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially crafted pixel shader can cause memory corruption vulnerability. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability potentially could be triggered from guest machines running virtualization environments (ie. VMware, qemu, VirtualBox etc.) in order to perform guest-to-host escape - as it was demonstrated before (TALOS-2018-0533, TALOS-2018-0568, etc.). Theoretically this vulnerability could be also triggered from web browser (using webGL and webassembly). This vulnerability was triggered from HYPER-V guest using RemoteFX feature leading to executing the vulnerable code on the HYPER-V host (inside of the rdvgm.exe process).

The weakness was shared 07/20/2020 (Website). It is possible to read the advisory at talosintelligence.com. This vulnerability is known as CVE-2020-6100 since 01/07/2020. The exploitation appears to be difficult. The attack can be launched remotely. A single authentication is required for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/21/2020).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Hardware Driver Software

Vendor

• AMD

Name

• Graphics Driver

Version

• 26.20.15019.19000

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion