CVE-2020-12980

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125CWE-787

Affected software

VendorProductVersions
AMDAMD Radeon Software>= Radeon Software, < 20.7.1; >= Radeon Pro Software for Enterprise, < 21.Q2

References

Timeline

Published
Jun 11, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-129817.8An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially caCVE-2020-129827.8An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of servCVE-2020-129837.8An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or denial of service.CVE-2020-129857.8An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of CVE-2020-129867.8An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel,CVE-2020-129875.5A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead to KASLR bypass.CVE-2020-129887.5A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system whCVE-2020-12998.8A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attaCVE-2020-13008.8A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an CVE-2020-13018.8A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests,CVE-2020-13027.8An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioCVE-2020-13035.5<p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfull
CVE-2020-12980: High severity, CVSS 7.8 | Vulnix