Out-of-Bounds Read Vulnerability in VMware Products

CVE-2020-3970

Summary

VMware ESXi, Workstation, and Fusion versions prior to specified updates are affected by an out-of-bounds read vulnerability in the Shader functionality. This flaw may allow a malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled to exploit the vulnerability, potentially leading to the crashing of the vmx process. This results in a partial denial of service condition and can undermine the stability of the virtual machine environment.

References