2. Relevant Products

VMware vSphere ESXi (ESXi)

VMware Workstation Pro / Player (Workstation)

VMware Fusion Pro, Fusion (Fusion)

3. Problem Description

Out-of-bounds read vulnerability in SVGA Device



VMware ESXi, Fusion and Workstation contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.



VMware would like to thank Anonymous working with Trend Micro's Zero Day Initiative for reporting this issue to us.



The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2018-6974 to this issue.



Column 5 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available.