CVE-2020-12933

EPSS 0.3%CWE-125

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 oct 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTEscape API request can cause an out-of-bounds read in Windows OS kernel memory area. This vulnerability can be triggered from a non-privileged account.

Productos afectados

n/a · AMD Graphics Driver for Windows

Referencias

https://www.amd.com/en/corporate/product-security