Skip to content
OpenAdvisories
Unscored CVE-2020-6101 EUVD-2020-27255GHSA-3583-6263-6c39

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.190…

Published Jul 20, 2020 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered from a HYPER-V guest using the RemoteFX feature, leading to executing the vulnerable code on the HYPER-V host (inside of the rdvgm.exe process). Theoretically this vulnerability could be also triggered from web browser (using webGL and webassembly).

Affected products

VendorProductAffectedFixed
— AMD AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000 —

References