VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 25, 2020· Updated Aug 4, 2024

CVE-2020-3970

CVE-2020-3970

Description

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in the Shader functionality. A malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process leading to a partial denial of service condition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • VMware/Esxillm-fuzzy
    Range: <ESXi_7.0.0-1.20.16321839, <ESXi670-202004101-SG, <ESXi650-202005401-SG
  • VMware/Fusionllm-fuzzy2 versions
    <11.5.5+ 1 more
    • (no CPE)range: <11.5.5
    • (no CPE)range: 11.x before 11.5.5
  • VMware/Workstationllm-fuzzy2 versions
    <15.5.5+ 1 more
    • (no CPE)range: <15.5.5
    • (no CPE)range: 15.x before 15.5.5
  • VMware/VMware ESXiv5
    Range: 7.0 before ESXi_7.0.0-1.20.16321839

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.