Insufficient Pointer Validation in AMD Graphics Driver for Windows 10
CVE-2020-12986

7.8HIGH

Key Information:

Vendor

Amd
Status
Amd Radeon Software
Vendor
CVE Published:
11 June 2021

What is CVE-2020-12986?

An insufficient pointer validation issue exists in the AMD Graphics Driver for Windows 10 that could lead to arbitrary code execution within the kernel environment. This vulnerability may allow attackers to escalate privileges or cause a denial of service, posing significant risks to system integrity and availability. Users should consider updating their drivers to mitigate potential threats associated with this security flaw.

Affected Version(s)

AMD Radeon Software Radeon Software < 20.7.1

AMD Radeon Software Radeon Pro Software for Enterprise < 21.Q2

References

https://www.amd.com/en/corporate/product-security/bulleti...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.