CVE-2020-12138: Critical severity amd athlon 64 vulnerability
AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM privileges via a DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-12138?
CVE-2020-12138 has a high severity rating due to its potential to allow low-privileged users to escalate privileges to NT AUTHORITY\SYSTEM.
How do I fix CVE-2020-12138?
To fix CVE-2020-12138, update the AMD ATI atillk64.sys driver to the latest version provided by AMD.
Who is affected by CVE-2020-12138?
Users of AMD's ATI atillk64.sys version 5.11.9.0 are affected by CVE-2020-12138.
What exploitation methods are possible with CVE-2020-12138?
CVE-2020-12138 can be exploited to allow unauthorized access to physical memory, potentially enabling privilege escalation.
Is CVE-2020-12138 currently being exploited in the wild?
As of the latest reports, there have been no confirmed cases of active exploitation of CVE-2020-12138.