Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-12864 State: PUBLISHED Published: 2020-06-24T12:52:44 Last Updated: 2024-08-04T12:11:18.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-081. Additional Analyst Notes: - CVE Program Container: References: - https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html - https://securitylab.github.com/advisories/GHSL-2020-075-libsane - https://usn.ubuntu.com/4470-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079
020-075-libsane - https://usn.ubuntu.com/4470-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html
CVE ID: CVE-2020-12865 State: PUBLISHED Published: 2020-06-24T12:52:38 Last Updated: 2024-08-04T12:11:18.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084. Additional Analyst Notes: - CVE Program Container: References: - https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html - https://securitylab.github.com/advisories/GHSL-2020-075-libsane - https://lists.debian.org/debian-lts-announce/2020/08/msg00029.html - https://usn.ubuntu.com/4470-1/ - https://lists.debian.org/debian-lts-announce
ebian-lts-announce/2020/08/msg00029.html - https://usn.ubuntu.com/4470-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html
CVE ID: CVE-2020-12866 State: PUBLISHED Published: 2020-06-24T12:52:23 Last Updated: 2024-08-04T12:11:18.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079. Additional Analyst Notes: - CVE Program Container: References: - https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html - https://securitylab.github.com/advisories/GHSL-2020-075-libsane - https://usn.ubuntu.com/4470-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html - http://lists.opensuse.org/opensuse-s
0-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html
CVE ID: CVE-2020-12867 State: PUBLISHED Published: 2020-06-01T13:50:43 Last Updated: 2024-08-04T12:11:18.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075. Additional Analyst Notes: - CVE Program Container: References: - https://alioth-lists.debian.net/pipermail/sane-announce/2020/000041.html - https://gitlab.com/sane-project/backends/-/issues/279#issue-1-ghsl-2020-075-null-pointer-dereference-in-sanei_epson_net_read - https://securitylab.github.com/advisories/GHSL-2020-075-l
sl-2020-075-null-pointer-dereference-in-sanei_epson_net_read - https://securitylab.github.com/advisories/GHSL-2020-075-libsane - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWUVCHURVGGYBEUOBA4PLSNXJVBKHJYJ/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00029.html - https://usn.ubuntu.com/4470-1/ - https://lists.debian.org/debian-lts-announce/2020/10/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00079.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00003.html
CVE ID: CVE-2020-12869 State: PUBLISHED Published: 2020-09-30T20:54:21 Last Updated: 2024-08-04T12:11:18.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: RainbowFish PacsOne Server 6.8.4 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.pacsone.net/download.htm - https://github.com/bzyo/cve-pocs/tree/master/CVE-2020-12869
CVE ID: CVE-2020-12870 State: PUBLISHED Published: 2020-09-30T20:40:19 Last Updated: 2024-08-04T12:11:18.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page. Additional Analyst Notes: - CVE Program Container: References: - https://www.pacsone.net/download.htm - https://github.com/bzyo/cve-pocs/tree/master/CVE-2020-12870
CVE ID: CVE-2020-12872 State: PUBLISHED Published: 2020-05-15T18:20:07 Last Updated: 2024-08-04T12:11:19.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with a version less than 21.0. Additional Analyst Notes: - CVE Program Container: References: - https://sweet32.info/ - https://github.com/erlyaws/yaws/blob/c0fd79f17d52628fcec527da7fa3e788c283c445/src/yaws_config.erl#L2068-L2075 - https://github.com/erlyaws/yaws/releases - https://medium.com/%40charlielabs101/cve-2020-12872-df315411aa70 - https://github
s://github.com/erlyaws/yaws/releases - https://medium.com/%40charlielabs101/cve-2020-12872-df315411aa70 - https://github.com/erlyaws/yaws/issues/402
CVE ID: CVE-2020-12873 State: PUBLISHED Published: 2021-02-19T22:36:14 Last Updated: 2024-08-04T12:11:19.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with privileges to edit a FreeMarker template (e.g., a webscript) may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running Alfresco. Additional Analyst Notes: - CVE Program Container: References: - https://issues.alfresco.com/jira/browse/MNT-21510 - https://securitylab.github.com/advisories/GHSL-2020-039-alfresco
CVE ID: CVE-2020-12874 State: PUBLISHED Published: 2020-05-14T19:07:18 Last Updated: 2024-08-04T12:11:19.001Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Veritas APTARE versions prior to 10.4 included code that bypassed the normal login process when specific authentication credentials were provided to the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-003
CVE ID: CVE-2020-12875 State: PUBLISHED Published: 2020-05-14T19:07:05 Last Updated: 2024-08-04T12:11:19.021Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AC:L/AV:N/A:L/C:L/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive information or functionality by manipulating specific parameters within the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-003
CVE ID: CVE-2020-12876 State: PUBLISHED Published: 2020-05-14T19:06:25 Last Updated: 2024-08-04T12:11:18.999Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulnerability only impacts Windows server deployments. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-003
CVE ID: CVE-2020-12877 State: PUBLISHED Published: 2020-05-14T19:06:53 Last Updated: 2024-08-04T12:11:18.979Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS20-003
CVE ID: CVE-2020-12878 State: PUBLISHED Published: 2021-02-17T23:07:11 Last Updated: 2024-08-04T12:11:18.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /etc/init.d/S50dropbear.sh and the /WEB/python/.ssh directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fireeye/Vulnerability-Disclosures - https://www.digi.com/support/productdetail?pid=5570 - https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2020-0020/FEYE-2020-0020.md
CVE ID: CVE-2020-12880 State: PUBLISHED Published: 2020-07-27T22:10:12 Last Updated: 2024-08-04T12:11:18.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8. By manipulating a certain kernel boot parameter, it can be tricked into dropping into a root shell in a pre-install phase where the entire source code of the appliance is available and can be retrieved. (The source code is otherwise inaccessible because the appliance has its hard disks encrypted, and no root shell is available during normal operation.) Additional Analyst Notes: - CVE Program Container: Reference
d, and no root shell is available during normal operation.) Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/?atype=sa - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44516
CVE ID: CVE-2020-12882 State: PUBLISHED Published: 2020-05-15T04:55:07 Last Updated: 2024-08-04T12:11:18.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Submitty/Submitty/issues/5266 - http://packetstormsecurity.com/files/157756/Submitty-20.04.01-Cross-Site-Scripting.html
CVE ID: CVE-2020-12883 State: PUBLISHED Published: 2020-06-18T18:24:59 Last Updated: 2024-08-04T12:11:18.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point (*packet_data_pptr) is increased correspondingly. The pointer is restricted by the size of the received buffer, as well as by the option delta and option length bytes. The actual input packet length is not verified against the number of bytes
by the option delta and option length bytes. The actual input packet length is not verified against the number of bytes read when processing the option extended delta and the option extended length. Moreover, the calculation of the message_left variable, in the case of non-extended option deltas, is incorrect and indicates more data left for processing than provided in the function input. All of these lead to heap-based or stack-based memory location read access that is outside of the intended boundary of the buffer. Depending on the platform-specific memory management mechanisms, it can lead to processing of unintended inputs or system memory access violation errors. Additional Analyst Note
anisms, it can lead to processing of unintended inputs or system memory access violation errors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARMmbed/mbed-os/issues/12925 - https://github.com/ARMmbed/mbed-os/issues/12926 - https://github.com/ARMmbed/mbed-os/issues/12927 - https://github.com/ARMmbed/mbed-coap/pull/116
CVE ID: CVE-2020-12884 State: PUBLISHED Published: 2020-06-18T18:24:56 Last Updated: 2024-08-04T12:11:19.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse_multiple_options() parses CoAP options that may occur multiple consecutive times in a single packet. While processing the options, packet_data_pptr is accessed after being incremented by option_len without a prior out-of-bounds memory check. The temp_parsed_uri_query_ptr is validated for a correct range, but the range valid for temp_parsed_uri_
s memory check. The temp_parsed_uri_query_ptr is validated for a correct range, but the range valid for temp_parsed_uri_query_ptr is derived from the amount of allocated heap memory, not the actual input size. Therefore the check of temp_parsed_uri_query_ptr may be insufficient for safe access to the area pointed to by packet_data_pptr. As a result, access to a memory area outside of the intended boundary of the packet buffer is made. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARMmbed/mbed-os/issues/12928 - https://github.com/ARMmbed/mbed-coap/pull/116
CVE ID: CVE-2020-12885 State: PUBLISHED Published: 2020-06-18T18:24:53 Last Updated: 2024-08-04T12:11:19.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse_multiple_options() parses CoAP options in a while loop. This loop's exit condition is computed using the previously allocated heap memory required for storing the result of parsing multiple options. If the input heap memory calculation results in zero bytes, the loop exit condition is never met and the loop is not terminated. As a result, the pac
ulation results in zero bytes, the loop exit condition is never met and the loop is not terminated. As a result, the packet parsing function never exits, leading to resource consumption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARMmbed/mbed-os/issues/12929 - https://github.com/ARMmbed/mbed-coap/pull/116
CVE ID: CVE-2020-12886 State: PUBLISHED Published: 2020-06-18T18:24:51 Last Updated: 2024-08-04T12:11:18.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses the CoAP packet header starting from the message token. The length of the token in the received message is provided in the first byte parsed by the sn_coap_parser_options_parse() function. The length encoded in the message is not validated against the actual input buffer length before accessing the token. As a result, memory access out
ssage is not validated against the actual input buffer length before accessing the token. As a result, memory access outside of the intended boundary of the buffer may occur. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARMmbed/mbed-os/issues/12948 - https://github.com/ARMmbed/mbed-coap/pull/116
CVE ID: CVE-2020-12887 State: PUBLISHED Published: 2020-06-18T18:24:47 Last Updated: 2024-08-04T12:11:18.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses the CoAP option number field of all options present in the input packet. Each option number is calculated as a sum of the previous option number and a delta of the current option. The delta and the previous option number are expressed as unsigned 16-bit integers. Due to lack of overflow detection,
The delta and the previous option number are expressed as unsigned 16-bit integers. Due to lack of overflow detection, it is possible to craft a packet that wraps the option number around and results in the same option number being processed again in a single packet. Certain options allocate memory by calling a memory allocation function. In the cases of COAP_OPTION_URI_QUERY, COAP_OPTION_URI_PATH, COAP_OPTION_LOCATION_QUERY, and COAP_OPTION_ETAG, there is no check on whether memory has already been allocated, which in conjunction with the option number integer overflow may lead to multiple assignments of allocated memory to a single pointer. This has been demonstrated to lead to memory lea
y lead to multiple assignments of allocated memory to a single pointer. This has been demonstrated to lead to memory leak by buffer orphaning. As a result, the memory is never freed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARMmbed/mbed-os/issues/12957 - https://github.com/ARMmbed/mbed-os/issues/12930 - https://github.com/mjurczak/mbed-coap/commit/4647a68e364401e81dbd370728127d844f221d93 - https://github.com/ARMmbed/mbed-coap/pull/116
CVE ID: CVE-2020-12888 State: PUBLISHED Published: 2020-05-15T17:02:20 Last Updated: 2024-08-04T12:11:18.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/kvm/158871570274.15589.10563806532874116326.stgit%40gimli.home/ - https://lore.kernel.org/kvm/158871401328.15589.17598154478222071285.stgit%40gimli.home/ - http://www.openwall.com/lists/oss-security/2020/05/19/6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXGMJHWTMQI34NJZ4BHL3ZV
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXGMJHWTMQI34NJZ4BHL3ZVF264AWBF2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBEHRQQZTKJTPQFPY3JAO7MQ4JAFEQNW/ - https://security.netapp.com/advisory/ntap-20200608-0001/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html - https://usn.ubuntu.com/4526-1/ - https://usn.ubuntu.com/4525-1/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.deb
-announce/2020/09/msg00025.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html
CVE ID: CVE-2020-12889 State: PUBLISHED Published: 2020-05-15T17:53:39 Last Updated: 2024-08-04T12:11:19.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP-maltego/commit/3ccde66dab4096ab5663e69f352992cc73e1160b
CVE ID: CVE-2020-12890 State: PUBLISHED Published: 2021-12-10T21:56:55.155031Z Last Updated: 2024-09-16T23:36:11.770Z Vendors: AMD Products: AMD Processors Problem Types: NA Description: Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture (AGESA) to execute arbitrary code undetected by the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security
CVE ID: CVE-2020-12891 State: PUBLISHED Published: 2022-02-04T22:29:12.020774Z Last Updated: 2024-09-16T17:33:32.143Z Vendors: AMD Products: Radeon Software, Radeon Pro Software for Enterprise Problem Types: TBD Description: AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE ID: CVE-2020-12892 State: PUBLISHED Published: 2021-11-15T18:39:47.290631Z Last Updated: 2024-09-16T17:34:18.633Z Vendors: AMD Products: AMD Radeon Software Problem Types: NA Description: An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE ID: CVE-2020-12893 State: PUBLISHED Published: 2021-11-15T19:45:36.942420Z Last Updated: 2024-09-16T23:15:51.176Z Vendors: AMD Products: AMD Radeon Software Problem Types: NA Description: Stack Buffer Overflow in AMD Graphics Driver for Windows 10 in Escape 0x15002a may lead to escalation of privilege or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE ID: CVE-2020-12894 State: PUBLISHED Published: 2021-11-15T19:48:37.220384Z Last Updated: 2024-09-17T01:45:55.094Z Vendors: AMD Products: AMD Radeon Software Problem Types: NA Description: Arbitrary Write in AMD Graphics Driver for Windows 10 in Escape 0x40010d may lead to arbitrary write to kernel memory or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE ID: CVE-2020-12895 State: PUBLISHED Published: 2021-11-15T15:56:00.755364Z Last Updated: 2024-09-16T22:02:20.505Z Vendors: AMD Products: AMD Radeon Software Problem Types: NA Description: Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege, information disclosure or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE ID: CVE-2020-12896 State: REJECTED Published: 2021-06-11T21:41:02 Last Updated: 2021-06-11T21:41:02 Description: No description available.
CVE ID: CVE-2020-12897 State: PUBLISHED Published: 2021-11-15T15:44:11.456371Z Last Updated: 2024-09-16T17:38:45.112Z Vendors: AMD Products: AMD Radeon Software Problem Types: NA Description: Kernel Pool Address disclosure in AMD Graphics Driver for Windows 10 may lead to KASLR bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE ID: CVE-2020-12898 State: PUBLISHED Published: 2021-11-15T18:58:30.225747Z Last Updated: 2024-09-17T03:03:38.846Z Vendors: AMD Products: AMD Radeon Software Problem Types: NA Description: Stack Buffer Overflow in AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE ID: CVE-2020-12899 State: PUBLISHED Published: 2021-11-15T15:29:56.401647Z Last Updated: 2024-09-16T18:44:07.969Z Vendors: AMD Products: AMD Radeon Software Problem Types: NA Description: Arbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000