CVE-2020-12965

HIGH

AMD Ryzen PRO Firmware - Data Leakage via Non-Canonical Address Handling

Title source: llm

Description

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.

References (2)

Core 2

Core References

Mitigation, Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010

Mailing List mailing-list

http://www.openwall.com/lists/oss-security/2023/12/05/3

Scores

CVSS v3 7.5

EPSS 0.0038

EPSS Percentile 59.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-74

Status published

Products (50)

amd/athlon_3050ge_firmware

amd/athlon_3150g_firmware

amd/athlon_3150ge_firmware

amd/athlon_gold_pro_3150g_firmware

amd/athlon_gold_pro_3150ge_firmware

amd/athlon_pro_200ge_firmware

amd/athlon_pro_300ge_firmware

amd/athlon_silver_pro_3125ge_firmware

amd/ryzen_4300g_firmware

amd/ryzen_4300ge_firmware

... and 40 more

Published Feb 04, 2022

Tracked Since Feb 18, 2026