CVE Database
/

CVE-2020-12890

Back to search

CVE-2020-12890

Published: Dec 10, 2021

Modified: Sep 16, 2024

PUBLISHED

Description

Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system.

VendorProductVersions

AMD

AMD Processors

unaffected
Processor EPYC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now