Arbitrary Write Vulnerability in AMD Radeon Graphics Driver for Windows 10
CVE-2020-12900

7.8HIGH

Key Information:

Vendor

Amd
Status
Amd Radeon Software
Vendor
CVE Published:
15 November 2021

What is CVE-2020-12900?

The AMD Radeon Graphics Driver for Windows 10 contains an arbitrary write vulnerability that may allow unprivileged users to manipulate system memory. This flaw could potentially lead to elevation of privileges, enabling attackers to gain unauthorized access to sensitive information or control over the system. Furthermore, it may expose devices to denial of service attacks, compromising system stability. Users are urged to apply the recommended updates from AMD to mitigate these risks.

Affected Version(s)

AMD Radeon Software Radeon Software < 20.7.1

AMD Radeon Software Radeon Pro Software for Enterprise < 21.Q2

References

https://www.amd.com/en/corporate/product-security/bulleti...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.