VULNERABILITY INTELLIGENCE

CVE-2020-12891

CVSS score7.8 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2022-02-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable.

Weakness classification

  • nvd@nist.gov: CWE-427

Primary references