CVE-2020-12895 — Out-of-bounds Write in AMD Radeon Software

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 60.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
AMD Radeon SoftwareAMD Radeon Software
Timeline
PublishedNov 15
Latest updateMay 24

Description

Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege, information disclosure or denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDamd/radeon_software< 20.11.2
▶CVEListV5amd/amd_radeon_softwareRadeon Software — 20.11.2+1

🔴Vulnerability Details

2
GHSA
GHSA-fw8w-ww6v-qw9j: Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege, information disclosure or denial of s↗2022-05-24
▶
CVEList
CVE-2020-12895: Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege, information disclosure or denial of s↗2021-11-15
▶
CVE-2020-12895 — Out-of-bounds Write in AMD | cvebase