CVE-2020-12901

CWE-416 — Use After Free3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 73.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
AMD AMD Radeon SoftwareAMD Radeon Software
Timeline
PublishedNov 15
Latest updateMay 24

Description

Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDamd/radeon_software< 20.7.1
▶CVEListV5amd/amd_radeon_softwareRadeon Software — 20.11.2+1

🔴Vulnerability Details

2
GHSA
GHSA-gh2h-qm94-g5pr: Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure↗2022-05-24
▶
CVEList
CVE-2020-12901: Arbitrary Free After Use in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or information disclosure↗2021-11-15
▶
CVE-2020-12901 (MEDIUM CVSS 5.5) | Arbitrary Free After Use in AMD Gra | cvebase.io