CVE-2020-12986

HIGH

AMD Radeon Pro Software < 21.q1 & Radeon Software < 20.7.1 - Kernel Code Execution via Pointer Validation

Title source: llm
STIX 2.1

Description

An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel, leading to escalation of privilege or denial of service.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0024
EPSS Percentile 46.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (2)
amd/radeon_pro_software < 21.q1
amd/radeon_software < 20.7.1
Published Jun 11, 2021
Tracked Since Feb 18, 2026