CVE-2020-12890

6.7 mediumEPSS 0.3%

Medium (6.7) in amd amd generic encapsulated software architecture. EPSS 0.3% chance of exploitation in the next 30 days.

Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
Published: 2021-12-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

amd:amd_generic_encapsulated_software_architecture

References

https://www.amd.com/en/corporate/product-security
https://www.amd.com/en/corporate/product-security

Check your stack JSON