Description
VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | VMware Workstation | 17.x – < 17.5.2 | 17.5.2 |
| — | VMware Fusion | — | — |
Advisories 1
- WID-SEC-2024-1141 VMware Workstation und VMware Fusion: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 14, 2024