QwikSec

Security Database

CVE

CWE

Training

CVE-2020-12933

Published: Oct 13, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. version 26.20.15029.27017). A specially crafted D3DKMTEscape API request can cause an out-of-bounds read in Windows OS kernel memory area. This vulnerability can be triggered from a non-privileged account.

Vendor	Product	Versions
n/a	AMD Graphics Driver for Windows	affected `Fixed in version 20.50 and later`

Weaknesses (CWE)

References

https://www.amd.com/en/corporate/product-security

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.