Login Request a demo
High severity · published Feb 4, 2022
CVE-2020-12965
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data…
7.5
CVSS
2.4%
EPSS
No
On KEV
Description
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
Athlon Gold Pro 3150g Firmware · Amd
All versions, or not specified · source: NVD
AG
Athlon Gold Pro 3150ge Firmware · Amd
All versions, or not specified · source: NVD
AP
Athlon Pro 200ge Firmware · Amd
All versions, or not specified · source: NVD
AP
Athlon Pro 300ge Firmware · Amd
All versions, or not specified · source: NVD
AS
Athlon Silver Pro 3125ge Firmware · Amd
All versions, or not specified · source: NVD
R4
Ryzen 4300g Firmware · Amd
All versions, or not specified · source: NVD
R4
Ryzen 4300ge Firmware · Amd
All versions, or not specified · source: NVD
R4
Ryzen 4600g Firmware · Amd
All versions, or not specified · source: NVD
R4
Ryzen 4600ge Firmware · Amd
All versions, or not specified · source: NVD
R4
Ryzen 4700g Firmware · Amd
All versions, or not specified · source: NVD
R4
Ryzen 4700ge Firmware · Amd
All versions, or not specified · source: NVD
R5
Ryzen 5300g Firmware · Amd
All versions, or not specified · source: NVD
Affected product
AG
Athlon Gold Pro 3150g Firmware
Amd
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12965
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12965
www.openwall.com
http://www.openwall.com/lists/oss-security/2023/12/05/3
Mitigation
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010
More from Athlon Gold Pro 3150g Firmware
8.2
CVE-2022-23815
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution
7.8
CVE-2023-20555
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially…
7.8
CVE-2021-26316
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management…
6.0
CVE-2021-26367
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to…
5.5
CVE-2023-20588
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality