High severity · published Feb 4, 2022
CVE-2020-12891
AMD Radeon Software may be vulnerable to DLL Hijacking through path variable
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Radeon Pro Software · Amd
before 21.q2 · source: NVD
RS
Radeon Software · Amd
before 21.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12891
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12891
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
More from Radeon Pro Software
7.8
CVE-2021-26392
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the…
7.8
CVE-2021-26391
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the…
7.8
CVE-2021-26360
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers
7.8
CVE-2020-12931
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity
7.8
CVE-2020-12930
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity