Arbitrary Free After Use in AMD Graphics Driver for Windows 10
CVE-2020-12901

5.5MEDIUM

Key Information:

Vendor
Amd
Status
Amd Radeon Software
Vendor
CVE Published:
15 November 2021

Summary

The AMD Graphics Driver for Windows 10 is vulnerable to an arbitrary free after use condition, which could potentially allow attackers to bypass Kernel Address Space Layout Randomization (KASLR) or disclose sensitive information. This can compromise system security by exposing memory content that should remain protected. Users are encouraged to review the latest security updates and apply necessary patches to mitigate risks.

Affected Version(s)

AMD Radeon Software Radeon Software < 20.11.2

AMD Radeon Software Radeon Pro Software for Enterprise < 21.Q2

References

https://www.amd.com/en/corporate/product-security/bulleti...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.