Carzy Zarx’s PC Gaming Emporium - Catch Up on All the Latest PC Gaming Related News

[JEMC]

Those of you with an AMD card and drivers that are not up to date, you should update to the newest 20.1.1 soon.

AMD Quietly Patched Four Major GPU Security Vulnerabilities with Radeon 20.1.1 Drivers
https://www.techpowerup.com/263237/amd-quietly-patched-four-major-gpu-security-vulnerabilities-with-radeon-20-1-1-drivers

If you haven't updated your AMD Radeon drivers in a while, here's one major reason to. The company secretly patched four major security vulnerabilities affecting Radeon GPUs, in its recent Adrenalin 20.1.1 drivers, with no mention of doing so in its changelog. Talos Intelligence reports four vulnerabilities, which are are chronicled under CVE-2019-5124, CVE-2019-5146, CVE-2019-5147 and CVE-2019-5183. This class of attacks exploits a vulnerability in the AMD Radeon driver file ATIDXX64.dll, which can lead to denial of service or even remote code execution. What makes things much more serious is that this attack vector can be used to exploit the host machine from a VM (tested with VMWare). It even seems possible to trigger the vulnerability from a web page, through WebGL (which allows running 3D applications on a remote website). The vulnerabilities were tested on Radeon RX 550 / 550 Series VMware Workstation 15 (15.5.0 build-14665864) with Windows 10 x64 as guest VM, but there is no reason to assume that the issue is limited to just RX 550 as the AMD shader compiler shares a common code basis for all recent DirectX 12 GPUs.

You can find the latest driver from here.