CVE-2020-12986

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.8HIGH
EPSS
0.2%
top 53.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
AMD AMD Radeon SoftwareAMD Radeon PRO SoftwareAMD Radeon Software
Timeline
PublishedJun 11

Description

An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel, leading to escalation of privilege or denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶NVDamd/radeon_software< 20.7.1
▶CVEListV5amd/amd_radeon_softwareRadeon Software — 20.7.1+1

🔴Vulnerability Details

1
CVEList
CVE-2020-12986: An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel, leading t↗2021-06-11
▶

💬Community

1
Bugzilla
CVE-2020-1744 keycloak: failedLogin Event not sent to BruteForceProtector when using Post Login Flow with Conditional-OTP↗2020-02-21
▶
CVE-2020-12986 (HIGH CVSS 7.8) | An insufficient pointer validation | cvebase.io