CVE-2020-12933

EPSS 0.3%CWE-125

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 out 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTEscape API request can cause an out-of-bounds read in Windows OS kernel memory area. This vulnerability can be triggered from a non-privileged account.

Produtos afetados

n/a · AMD Graphics Driver for Windows

Referências

https://www.amd.com/en/corporate/product-security