CVE-2020-12981

An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, which can lead to escalation of privileges or denial of service.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*

History

12 Jul 2022, 17:42

Type Values Removed Values Added
CWE CWE-20 CWE-787

30 Dec 2021, 19:03

Type Values Removed Values Added
CPE cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 7.2
v3 : 7.8
CWE CWE-20
References (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000 - (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000 - Vendor Advisory

27 Dec 2021, 19:15

Type Values Removed Values Added
Summary ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none. An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, which can lead to escalation of privileges or denial of service.
References
  • (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000 -

11 Jun 2021, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-06-11 22:15

Updated : 2024-02-04 21:47


NVD link : CVE-2020-12981

Mitre link : CVE-2020-12981

CVE.ORG link : CVE-2020-12981


JSON object : View

Products Affected

amd

  • radeon_software
  • radeon_pro_software

microsoft

  • windows_10
CWE
CWE-787

Out-of-bounds Write