CVE-2020-12894: High severity amd radeon software for hip vulnerability
Published Nov 15, 2021
·Updated
Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write to kernel memory or denial of service.
Affected Software
2 affected components
AMD Radeon Software<20.7.1
Microsoft Windows 10
Event History
Nov 15, 2021
CVE Published
via MITRE·07:48 PM
Data Sourced
via MITRE·07:48 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-12894?
CVE-2020-12894 is an arbitrary write vulnerability in the AMD Graphics Driver for Windows 10 in Escape 0x40010d, which may lead to arbitrary write to kernel memory or denial of service.
2
Which software versions are affected by CVE-2020-12894?
AMD Radeon Software up to version 20.7.1 is affected by CVE-2020-12894.
3
What is the severity of CVE-2020-12894?
The severity of CVE-2020-12894 is high, with a CVSS score of 7.1.
4
How can CVE-2020-12894 be exploited?
CVE-2020-12894 can be exploited by using the Escape 0x40010d method in the AMD Graphics Driver for Windows 10.
5
What is the recommended action to mitigate CVE-2020-12894?
To mitigate CVE-2020-12894, it is recommended to update the AMD Radeon Software to a version beyond 20.7.1.