CVE-2020-12892 — Untrusted Search Path in AMD Radeon Software

CWE-426 — Untrusted Search Path3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 65.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
AMD Radeon SoftwareAMD Radeon Software
Timeline
PublishedNov 15
Latest updateMay 24

Description

An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDamd/radeon_software< 21.3.1
▶CVEListV5amd/amd_radeon_softwareRadeon Software — 21.3.1+1

🔴Vulnerability Details

2
GHSA
GHSA-39px-6j8j-mr74: An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution↗2022-05-24
▶
CVEList
CVE-2020-12892: An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution↗2021-11-15
▶
CVE-2020-12892 — Untrusted Search Path in AMD | cvebase