CVE-2019-5525

Summary

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.

Affected Software

VendorProductVersion RangeStatus
VMwareVMware WorkstationVMware Workstation (15.x before 15.1.0)affected

Weaknesses

  • Use-after-free vulnerability

ADP Enrichment

CVE Program Container

Additional References

References