Some AMD Radeon cards contain a remote code execution vulnerability in their ATIDXX64.DLL driver. This specific vulnerability exists on the Radeon RX 550 and the 550 Series while running VMWare Workstation 15. An attacker could exploit this vulnerability by supplying a malformed pixel shared inside the. guest operating system to the driver. The vulnerability can be triggered from within a. guest, potentially allowing code execution on the associated.VMVM host. Cisco Talos worked with AMD to ensure that these issues are resolved and that an update is available.”]
Source: https://blog.talosintelligence.com/2019/09/vuln-spotlight-AMD-Radeon-ATI-sept-19.html

