CVE-2020-12899 — Sensitive Information Exposure in AMD Radeon Software

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
7.1HIGHNVD
EPSS
0.0%
top 85.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
AMD Radeon SoftwareAMD Radeon Software
Timeline
PublishedNov 15
Latest updateMay 24

Description

Arbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages2 packages

▶NVDamd/radeon_software< 20.11.2
▶CVEListV5amd/amd_radeon_softwareRadeon Software — 20.11.2+1

🔴Vulnerability Details

2
GHSA
GHSA-p4x5-2rqj-qmm8: Arbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service↗2022-05-24
▶
CVEList
CVE-2020-12899: Arbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service↗2021-11-15
▶
CVE-2020-12899 — Sensitive Information Exposure in AMD | cvebase