Unscored CVE-2020-12891 EUVD-2020-5171GHSA-49c8-cmr9-7c94

AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL fi…

Published Feb 4, 2022 · Updated Sep 16, 2024 · Assigned by AMD

Vendor: AMD Product: Radeon Pro Software for Enterprise Product: Radeon Software

Description

AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable.

Affected products

Vendor	Product	Affected	Fixed
AMD	Radeon Software	Radeon Driver – < 21.4.1	21.4.1
AMD	Radeon Pro Software for Enterprise	Enterprise Driver – < 21.Q2	21.Q2

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000