AMD Radeon DirectX 11 Driver 26.20.15019.19000 Shader rdvgm.exe out-of-bounds write

Summaryinfo

A vulnerability described as critical has been identified in AMD Radeon DirectX 11 Driver 26.20.15019.19000. This affects an unknown part in the library atidxx64.dll of the file rdvgm.exe of the component Shader Handler. Executing a manipulation can lead to out-of-bounds write. This vulnerability is tracked as CVE-2020-6103. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability classified as critical was found in AMD Radeon DirectX 11 Driver 26.20.15019.19000 (Hardware Driver Software). This vulnerability affects an unknown code block in the library atidxx64.dll of the file rdvgm.exe of the component Shader Handler. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. The CWE definition for the vulnerability is CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered from a HYPER-V guest using the RemoteFX feature, leading to executing the vulnerable code on the HYPER-V host (inside of the rdvgm.exe process). Theoretically this vulnerability could be also triggered from web browser (using webGL and webassembly).

The weakness was disclosed 07/20/2020 (Website). The advisory is available at talosintelligence.com. This vulnerability was named CVE-2020-6103 since 01/07/2020. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 07/21/2020).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-158841 and VDB-158840 are pretty similar. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Hardware Driver Software

Vendor

• AMD

Name

• Radeon DirectX 11 Driver

Version

• 26.20.15019.19000

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion