CVE-2020-12930

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
AMD	AMD Radeon RX 5000 Series & PRO W5000 Series	>= AMD Radeon Software, < 22.5.2; >= AMD Radeon Pro Software Enterprise, < 22.Q2; >= Enterprise Driver, < 22.10.20
AMD	AMD Ryzen(TM) Embedded R1000	various
AMD	AMD Ryzen(TM) Embedded R2000	various
AMD	AMD Ryzen(TM) Embedded 5000	various
AMD	AMD Ryzen(TM) Embedded V1000	various
AMD	AMD Ryzen(TM) Embedded V2000	various

References

Timeline

Published: Nov 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-129317.8Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentiall CVE-2020-129335.5A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A s CVE-2020-12947.8An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows WalletServi CVE-2020-129447.8Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.CVE-2020-129467.1Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.CVE-2020-12958.8An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.CVE-2020-129517.0Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.CVE-2020-129545.5A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI CVE-2020-12965.5A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics & CVE-2020-129605.5AMD Graphics Driver for Windows 10, amdfender.sys may improperly handle input validation on InputBuffer which may result in a denial of serv CVE-2020-129617.8A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the CVE-2020-129627.8Escape call interface in the AMD Graphics Driver for Windows may cause privilege escalation.