CVE-2020-12929

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 85.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
AMD AMD Radeon SoftwareAMD Radeon Software
Timeline
PublishedNov 15
Latest updateMay 24

Description

Improper parameters validation in some trusted applications of the PSP contained in the AMD Graphics Driver may allow a local attacker to bypass security restrictions and achieve arbitrary code execution .

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDamd/radeon_software< 20.11.2
▶CVEListV5amd/amd_radeon_softwareRadeon Software — 20.11.2+1

🔴Vulnerability Details

2
GHSA
GHSA-wcj7-6hmh-63rm: Improper parameters validation in some trusted applications of the PSP contained in the AMD Graphics Driver may allow a local attacker to bypass secur↗2022-05-24
▶
CVEList
CVE-2020-12929: Improper parameters validation in some trusted applications of the PSP contained in the AMD Graphics Driver may allow a local attacker to bypass secur↗2021-11-15
▶
CVE-2020-12929 (HIGH CVSS 7.8) | Improper parameters validation in s | cvebase.io