CVE-2020-12891

7.8 highEPSS 0.3%

High (7.8) in amd. EPSS 0.3% chance of exploitation in the next 30 days.

AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2022-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

amd:radeon_pro_software
amd:radeon_software

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000

Check your stack JSON