VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Workstation_player | Vmware | 12.0.0 (including) | 12.0.0 (including) |
| Workstation_player | Vmware | 12.0.1 (including) | 12.0.1 (including) |
| Workstation_player | Vmware | 12.1.0 (including) | 12.1.0 (including) |
| Workstation_player | Vmware | 12.5.0 (including) | 12.5.0 (including) |
| Workstation_player | Vmware | 12.5.1 (including) | 12.5.1 (including) |
| Workstation_player | Vmware | 12.5.2 (including) | 12.5.2 (including) |
| Workstation_pro | Vmware | 12.0.0 (including) | 12.0.0 (including) |
| Workstation_pro | Vmware | 12.0.1 (including) | 12.0.1 (including) |
| Workstation_pro | Vmware | 12.1.0 (including) | 12.1.0 (including) |
| Workstation_pro | Vmware | 12.5.0 (including) | 12.5.0 (including) |
| Workstation_pro | Vmware | 12.5.1 (including) | 12.5.1 (including) |
| Workstation_pro | Vmware | 12.5.2 (including) | 12.5.2 (including) |