CVE-2020-12894

High

Published: 15 November 2021

Published

15 November 2021

Modified

21 November 2024

KEV Added

—

Patch

—

CVSS Score v3.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS Score 0.0012 30.9th percentile

Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2020-12894 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Amd Radeon Software. Its CVSS base score is 7.1 (High).

Operationally, ranked at the 30.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write to kernel memory or denial of service.

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

amd

radeon software

≤ 20.7.1

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-787

Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.