CVE-2020-12981

An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, which can lead to escalation of privileges or denial of service.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*

History

07 Nov 2023, 03:15

Type Values Removed Values Added
References (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000 - Vendor Advisory () https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000 -

12 Jul 2022, 17:42

Type Values Removed Values Added
CWE CWE-20 CWE-787

30 Dec 2021, 19:03

Type Values Removed Values Added
References (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000 - (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000 - Vendor Advisory
First Time Amd
Microsoft
Amd radeon Software
Microsoft windows 10
Amd radeon Pro Software
CVSS v2 : unknown
v3 : unknown
v2 : 7.2
v3 : 7.8
CPE cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*
cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:*
CWE CWE-20

27 Dec 2021, 19:15

Type Values Removed Values Added
Summary ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none. An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, which can lead to escalation of privileges or denial of service.
References
  • (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000 -

11 Jun 2021, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-06-11 22:15

Updated : 2023-12-10 13:55


NVD link : CVE-2020-12981

Mitre link : CVE-2020-12981

CVE.ORG link : CVE-2020-12981


JSON object : View

Products Affected

amd

  • radeon_pro_software
  • radeon_software

microsoft

  • windows_10
CWE
CWE-787

Out-of-bounds Write