VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Apr 15, 2019· Updated Jun 17, 2026

CVE-2019-5520

CVE-2019-5520

Description

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates address an out-of-bounds read vulnerability. Exploitation of this issue requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of this issue may lead to information disclosure.The workaround for this issue involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

124
  • VMware/Fusion3 versions
    cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*range: >=10.0.0,<10.1.6
    • (no CPE)range: <11.0.3, <10.1.6
    • (no CPE)range: 11.x before 11.0.3
  • VMware/Workstation3 versions
    cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*range: >=14.0.0,<14.1.6
    • (no CPE)range: <15.0.3, <14.1.6
    • (no CPE)range: 15.x before 15.0.3
  • VMware/Esxi118 versions
    cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*+ 117 more
    • cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904201:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904202:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904203:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904204:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904205:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904206:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904207:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904208:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904209:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904210:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904211:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904212:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904213:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904214:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904215:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904216:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904217:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904218:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904219:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904220:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904221:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904222:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904223:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904224:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904225:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904226:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904227:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904228:*:*:*:*:*:*
    • cpe:2.3:o:vmware:esxi:6.7:670-201904229:*:*:*:*:*:*
    • (no CPE)range: <ESXi670-201904101-SG, <ESXi650-201903001
    • (no CPE)range: 6.7 before ESXi670-201904101-SG

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.