CVE-2020-12890

MEDIUM

AMD Generic Encapsulated Software Architecture - Arbitrary Code Execution via SMM Pointer Handling

Title source: llm
STIX 2.1

Description

Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.amd.com/en/corporate/product-security

Scores

CVSS v3 6.7
EPSS 0.0004
EPSS Percentile 13.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
amd/amd_generic_encapsulated_software_architecture
Published Dec 10, 2021
Tracked Since Feb 18, 2026